CVE

Id
90888  
CVE No.
CVE-2016-4069  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachments and cause a denial of service (disk consumption) via unspecified vectors.  
Phase
Assigned (20160423)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
782202 90888 CVE-2016-4069 MLIST:[oss-security] 20160423 Re: CVE Request: Roundcube: XSS issue in SVG image handling and protection for download urs against CSRF  View
782203 90888 CVE-2016-4069 URL:http://www.openwall.com/lists/oss-security/2016/04/23/4  View
782204 90888 CVE-2016-4069 CONFIRM:https://github.com/roundcube/roundcubemail/commit/4a408843b0ef816daf70a472a02b78cd6073a4d5  View
782205 90888 CVE-2016-4069 CONFIRM:https://github.com/roundcube/roundcubemail/commit/699af1e5206ed9114322adaa3c25c1c969640a53  View
782206 90888 CVE-2016-4069 CONFIRM:https://github.com/roundcube/roundcubemail/issues/4957  View
782207 90888 CVE-2016-4069 CONFIRM:https://github.com/roundcube/roundcubemail/releases/tag/1.1.5  View
782208 90888 CVE-2016-4069 CONFIRM:https://github.com/roundcube/roundcubemail/wiki/Changelog#release-115  View
782209 90888 CVE-2016-4069 SUSE:openSUSE-SU-2016:2109  View
782210 90888 CVE-2016-4069 URL:http://lists.opensuse.org/opensuse-updates/2016-08/msg00079.html  View
782211 90888 CVE-2016-4069 BID:92654  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4086 JVNDB-2016-004859 HPE Performance Center におけるアクセス制限を回避される脆弱性 HPE Performance Center には、"リモートユーザ検証の失敗 (remote user validation failure)" の問題に関する処理に不備があるため、アクセス制限を回避される脆弱性が存在します。 CVE-2016-4382 90888 6 8.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004859.html  View