Threats tagged 'ghsa-vch9-h7xh-rp47'

Roundcube Webmail versions before 1.6.21 and 1.7.x before 1.7.6 have an IMAP command injection vulnerability. This flaw allows attackers to inject IMAP commands via CRLF sequences in the _uid parameter when the messages_cache feature is enabled. Exploitation requires a logged-in victim to open a specially crafted GET link, which can lead to unauthorized deletion of messages, modification of message flags, or unauthorized mailbox access via SETACL commands.