Vulnerabilidades do Composer Roundcube/roundcubemail

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Composer Roundcube/roundcubemail: 1 registro(s), com versões afetadas e correções.

CVE-2025-49113 Alta · 8.8 KEV Urgente · 76 Exploit público CWE-502 02/06/2025

RoundCube Webmail Deserialization of Untrusted Data Vulnerability

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization.