CVE-2019-15237 PUBLISHED

Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.

EPSS 0.14% · 33.8th percentile

Risk Scores

EPSS Score
0.14%
33.8th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSroundcube1.4.11+dfsg.1-4, 0
Ubuntu:Pro:20.04:LTSroundcube1.4.3+dfsg.1-1ubuntu0.1~esm3, 1.4.3+dfsg.1-1ubuntu0.1~esm2, 1.3.10+dfsg.1-1
Ubuntu:Pro:18.04:LTSroundcube1.3.6+dfsg.1-1ubuntu0.1~esm1, 0, 1.3.0+dfsg.1-1
Ubuntu:Pro:16.04:LTSroundcube0, 1.2~beta+dfsg.1-0ubuntu1+esm6, 1.2~beta+dfsg.1-0ubuntu1+esm5

Timeline

References

Open in Interactive Console →