CVE-2011-1492

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets…

published April 8, 2011

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets (CSS) stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain sensitive information, via a crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01763 · 77.7th percentile
Published
2011-04-08T15:00Z
EPSS history
Timeline
  • 08 APR 15:00Z
    steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets…
    cvelistv5