Description

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076.

Remediation

References

CVE-2009-4077

Related Vulnerabilities

Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-15242)

WordPress Plugin 404 to 301-Redirect, Log and Notify 404 Errors Security Bypass (3.0.7)

PHP Reliance on Cookies without Validation and Integrity Checking Vulnerability (CVE-2020-7070)

MySQL CVE-2013-5860 Vulnerability (CVE-2013-5860)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-2376)

Severity

Medium

Classification

CVE-2009-4077 CWE-352

Tags

Missing Update Known Vulnerabilities