Description

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076.

Remediation

References

CVE-2009-4077

Related Vulnerabilities

PHP Address Book Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2903)

Oracle Application Server CVE-2006-0288 Vulnerability (CVE-2006-0288)

WordPress Plugin WooCommerce Cross-Site Scripting (2.2.10)

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Arbitrary File Upload (3.0.2)

WebLogic CVE-2021-35617 Vulnerability (CVE-2021-35617)

Severity

Medium

Classification

CVE-2009-4077 CWE-352

Tags

Missing Update Known Vulnerabilities