Threats tagged 'ghsa-8246-wqv2-g48f'

Roundcube Webmail versions before 1.6.20 and 1.7.x before 1.7.5 contain a mail header injection vulnerability. This occurs when forwarding a message as an attachment, where the subject line is used directly to name the attachment. If the subject contains CRLF sequences, it can inject arbitrary MIME part headers into the outgoing message. The issue has been fixed upstream by collapsing whitespace in the generated attachment name.