PT-2016-7943 · Roundcube Team · Roundcubemail

Published 2016-01-14 · Updated 2016-01-14

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions roundcubemail versions prior to 1.0.8

Description A path traversal issue has been identified. The issue has been fixed in version 1.0.8. For more details, refer to the upstream release announcement.

Recommendations For versions prior to 1.0.8, update to version 1.0.8 to resolve the issue.

Related Identifiers

MGASA-2016-0016

Affected Products

Roundcubemail

References · 5

• https://advisories.mageia.org/MGASA-2016-0016.html · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0016 · Vendor Advisory
• https://github.com/roundcube/roundcubemail/releases/tag/1.0.8 · Note
• http://lists.roundcube.net/pipermail/users/2015-December/011226.html · Note
• https://bugs.mageia.org/show_bug.cgi?id=17407 · Note