QwikSec

Security Database

CVE

CWE

Training

CVE-2014-9587

Published: Jan 15, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, related to (1) address book operations or the (2) ACL or (3) Managesieve plugins.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://roundcube.net/news/2014/12/18/update-1.0.4-released/

x_refsource_CONFIRM

https://bugzilla.redhat.com/show_bug.cgi?id=1179780

x_refsource_CONFIRM

https://bugs.gentoo.org/show_bug.cgi?id=534766

x_refsource_MISC

vdb-entry

x_refsource_BID

[oss-security] 20150111 Re: CVE request: roundcubemail: possible CSRF attacks to some address book operations as well as to the ACL and Managesieve plugins

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.