CISA known exploited vulnerability

CVE-2017-16651

Roundcube Webmail File Disclosure Vulnerability

SOURCE FACT

Roundcube · Roundcube Webmail

Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.

Required action

Apply updates per vendor instructions.

CISA notes

https://nvd.nist.gov/vuln/detail/CVE-2017-16651

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

CVE-2017-16651

Roundcube · Roundcube Webmail

Required action

CISA notes

Could this product be present?