All CVE records
CVE-2020-12641 — Roundcube Webmail Remote Code Execution Vulnerability
CISA KEV listed
Added June 22, 2023 Remediate by July 13, 2023
Description
Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
Required action
Apply updates per vendor instructions.
Notes
https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10; https://nvd.nist.gov/vuln/detail/CVE-2020-12641
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.