Unscored DSA-4674-1 2 CVEs

roundcube - security update

Published May 5, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 10	roundcube	1.3.11+dfsg.1-1~deb10u1
Debian · 9	roundcube	1.2.3+dfsg.1-4+deb9u4

Vulnerabilities 2

Unscored —

CVE-2020-12625 Public exploit

An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube…

roundcube roundcube Debian Ubuntu

May 4, 2020
Unscored —

CVE-2020-12626

An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged o…

roundcube roundcube Debian Ubuntu

May 4, 2020