CVE Watch—

CVE-2020-12641

Roundcube Webmail Remote Code Execution Vulnerability

CVSS

—

Sem CVSS

EPSS

84.4%

p100

KEV

SIM

22 de jun. de 2023

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

84.3%EPSS · 30 dias84.5%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Roundcube / Roundcube Webmail

Vulnerabilidade

Roundcube Webmail Remote Code Execution Vulnerability

Adicionado ao KEV

22 de jun. de 2023

Corrigir até

13 de jul. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.

Ação necessária

Apply updates per vendor instructions.

Notas

https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10; https://nvd.nist.gov/vuln/detail/CVE-2020-12641

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2021-44026—

99.4%

KEV—80Roundcube Webmail SQL Injection Vulnerability—CVE-2017-16651—

98.8%

KEV—80Roundcube Webmail File Disclosure Vulnerability—CVE-2020-35730—

98.4%

KEV—80Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability—