Source: roundcube Version: 1.2.3+dfsg.1-1 Severity: important Tags: security upstream Forwarded: https://github.com/roundcube/roundcubemail/issues/6238
Hi, The following vulnerability was published for roundcube. CVE-2018-9846[0]: | In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin | enabled and configured, it's possible to exploit the unsanitized, | user-controlled "_uid" parameter (in an archive.php | _task=mail&_mbox=INBOX&_action=plugin.move2archive request) to perform | an MX (IMAP) injection attack by placing an IMAP command after a %0d%0a | sequence. NOTE: this is less easily exploitable in 1.3.4 and later | because of a Same Origin Policy protection mechanism. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2018-9846 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9846 [1] https://github.com/roundcube/roundcubemail/issues/6238 Regards, Salvatore
