coldbraid

CVE-2020-12641 Roundcube Roundcube Webmail

Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.

CVSS
not scored

CWE-78

On CISA’s exploited list

Roundcube Webmail Remote Code Execution Vulnerability

Added
2023-06-22
Federal patch deadline
2023-07-13
Ransomware use
not known