CVE-2010-0464

Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for…

published January 29, 2010

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02000 · 80.5th percentile
Published
2010-01-29T18:00Z
EPSS history
Timeline
  • 29 JAN 18:00Z
    Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for…
    cvelistv5