CVE-2023-3221 | BDVDB-2026-210980 Detail

Description#

User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-09-04Record published in the CVE List.
2. Version 22024-09-30Most recent update recorded in the CVE List.