CVE-2009-4076
25.11.2009, 22:00
Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077.
| Vendor | Product | Version |
|---|---|---|
| roundcube | webmail | 𝑥 ≤ 0.2.2 |
| roundcube | webmail | 0.1 |
| roundcube | webmail | 0.1:20050811 |
| roundcube | webmail | 0.1:20050820 |
| roundcube | webmail | 0.1:20051007 |
| roundcube | webmail | 0.1:20051021 |
| roundcube | webmail | 0.1:alpha |
| roundcube | webmail | 0.1:beta |
| roundcube | webmail | 0.1:beta2 |
| roundcube | webmail | 0.1:rc1 |
| roundcube | webmail | 0.1:rc2 |
| roundcube | webmail | 0.1:stable |
| roundcube | webmail | 0.1.1 |
| roundcube | webmail | 0.2 |
| roundcube | webmail | 0.2:alpha |
| roundcube | webmail | 0.2:beta |
| roundcube | webmail | 0.2:stable |
| roundcube | webmail | 0.2.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References