CVE-2014-9587 | BDVDB-2026-67388 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to (1) address book operations or the (2) ACL or (3) Managesieve plugins.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://roundcube.net/news/2014/12/18/update-1.0.4-released/
https://bugzilla.redhat.com/show_bug.cgi?id=1179780
https://bugs.gentoo.org/show_bug.cgi?id=534766
http://www.securityfocus.com/bid/71909
http://www.openwall.com/lists/oss-security/2015/01/11/3

Exploit#

No public exploit known

History#

Version 12015-01-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.