BDU%3A2021-06259 — Vulnetix

BDU%3A2021-06259 PUBLISHED CVSS 7.5 HIGH

Уязвимость почтового клиента Roundcube, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольный SQL-код

Risk Scores

CVSS 2.0

7.5

Affected Products

Vendor	Product	Versions
Сообщество свободного программного обеспечения, Fedora Project, Thomas Brderli	Debian GNU/Linux, Fedora, Roundcube
n/a	n/a	n/a

Timeline

Dec 20, 2021 CVE Published
Jun 22, 2023 PoC Published
Sep 24, 2024 CVE Updated
Dec 24, 2024 PoC Published
Feb 23, 2025 PoC Published
May 4, 2025 PoC Published
Jul 1, 2025 PoC Published
Aug 31, 2025 PoC Published
Feb 2, 2026 PoC Published
Apr 15, 2026 Distribution Patch
Apr 15, 2026 Security Advisory

References

https://bugs.debian.org/1000156 url
https://github.com/roundcube/roundcubemail/commit/ee809bde2dcaa04857a919397808a7296681dcfa url
https://github.com/roundcube/roundcubemail/commit/c8947ecb762d9e89c2091bda28d49002817263f1 url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDVGIZMQJ5IOM47Y3SAAJRN5VPANKTKO/ url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TP3Y5RXTUUOUODNG7HFEKWYNIPIT2NL4/ url
https://github.com/roundcube/roundcubemail/commit/7d7b1dfeff795390b69905ceb63d6391b5b0dfe7 url
https://github.com/roundcube/roundcubemail/issues/8193 url
https://github.com/roundcube/roundcubemail/commit/faf99bf8a2b7b7562206fa047e8de652861e624a url
https://www.securitylab.ru/vulnerability/526935.php url
https://nvd.nist.gov/vuln/detail/CVE-2021-44026 url
https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
https://lists.debian.org/debian-lts-announce/2021/12/msg00004.html advisory
https://www.debian.org/security/2021/dsa-5013 advisory
FEDORA-2021-167865df98 vendor-advisory
FEDORA-2021-43d3c10590 vendor-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44026 url

Open in Interactive Console →