CVE-2015-5382

program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the…

published May 23, 2017

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the _alt parameter when uploading a vCard.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02925 · 86.9th percentile
Published
2017-05-23T03:56Z
EPSS history
Timeline
  • 23 MAY 03:56Z
    program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbitrary files via the…
    cvelistv5