CVE-2017-16651 Roundcube Roundcube Webmail
Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.
- CVSS
- not scored
On CISA’s exploited list
Roundcube Webmail File Disclosure Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- not known