Discover critical vulnerabilities in Roundcube webmail software that could allow hackers to steal sensitive data. Learn about the latest security patc

If you’re self hosting roundcube be sure to update.

  • shadowbert@lemmy.worldEnglish
    2·
    4 months ago

    It’s only if you view a specifically crafted email in the web client… still worth upgrading of course.

    • atzanteol@sh.itjust.worksOPEnglish
      6·
      4 months ago

      Only? “Viewing emails in a web browser” is the entire point of roundcube. It’s trivial to send out millions of “specially created emails” looking for a victim.

      • shadowbert@lemmy.worldEnglish
        3·
        4 months ago

        True, but it presumably would still require the user to open them.

        But, I was mostly worried that just having the server installed would be enough.