Skip to content
OpenAdvisories
Unscored DLA-613-1 3 CVEs

roundcube - security update

Published Sep 8, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 roundcube 0.7.2-9+deb7u4

Vulnerabilities 3

  • Unscored —
    CVE-2014-9587

    Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to …

    roundcube Debian
  • Unscored —
    CVE-2015-1433

    program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote …

    roundcube Debian
  • Unscored —
    CVE-2016-4069

    Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the…

    roundcube roundcube Debian Ubuntu