VDB
GCVE-110-MAGEIA-2020-206
GCVE-110-MAGEIA-2020-206
Advisory Published
Updated roundcubemail packages fix security vulnerabilities:
- Cross-Site Scripting (XSS) via malicious HTML content
(CVE-2020-12625)
- CSRF attack can cause an authenticated user to be logged out
(CEV-2020-12626)
- Remote code execution via crafted config options
- Path traversal vulnerability allowing local file inclusion via
crafted 'plugins' option
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | roundcubemail | 0 (affected), 1.3.11-1.mga7 (unaffected) | — |
Browse GCVE Records
1,413 records in the GCVE database · Updated October 25, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.