VDB
CVE-2024-37384
CVE-2024-37384
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Roundcube ist ein Open-Source Webmailsystem, basierend auf PHP.
EPSS 0.50% · 41.3th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.50%
41.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora | Fedora Linux <1.6.7 | |
| Open Source | Open Source Roundcube <1.5.7 | |
| Debian | Debian Linux | |
| Ubuntu | Ubuntu Linux | |
| Open Source | Open Source Roundcube Webmail <1.6.7 | |
| Open Source | Open Source Roundcube Webmail <1.5.7 | |
| Open Source | Open Source Roundcube <1.6.7 |
Timeline
- May 20, 2024 CVE Published
- Jun 18, 2024 EPSS Score
- Jul 11, 2024 EPSS Score
- Aug 3, 2024 EPSS Score
- Aug 26, 2024 EPSS Score
- Sep 18, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Oct 11, 2024 EPSS Score
- Nov 3, 2024 EPSS Score
- Nov 4, 2024 CVE Updated
- Nov 7, 2024 Coalition ESS Score
- Nov 26, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1318.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1318 advisory
- https://github.com/roundcube/roundcubemail/releases/tag/1.5.7 advisory
- https://github.com/roundcube/roundcubemail/releases/tag/1.6.7 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2290826 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2290830 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2290828 advisory
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-1193.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-1193 advisory
- https://roundcube.net/news/2024/05/19/security-updates-1.6.7-and-1.5.7 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-a591b4dc74 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-1f1aef9c1c advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-680b8ba54e advisory
- https://lists.debian.org/debian-lts-announce/2024/06/msg00008.html advisory
- https://lists.debian.org/debian-security-announce/2024/msg00124.html advisory
- https://ubuntu.com/security/notices/USN-6848-1 advisory
- https://thehackernews.com/2024/10/hackers-exploit-roundcube-webmail-xss.html exploit