Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Roundcube Improper Input Validation Vulnerability - CVE-2011-1492 - Vulnerability Database
Roundcube

Roundcube Improper Input Validation Vulnerability - CVE-2011-1492

Medium
Reference: CVE-2011-1492
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-1492
Title: Roundcube Improper Input Validation Vulnerability
Overview:

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets (CSS) stylesheet which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server and possibly obtain sensitive information via a crafted request.