CVE-2011-1492

Severity: medium (CVSS 5.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-04-08 · updated 2026-06-16
Weakness: CWE-20

Description

steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets (CSS) stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain sensitive information, via a crafted request.

Affected products

Roundcube Webmail: through 0.5; 0.1, 0.1-alpha, 0.1-beta, 0.1-beta2, 0.1-rc1, 0.1-rc2 (+15)

References

http://openwall.com/lists/oss-security/2011/03/24/3
http://openwall.com/lists/oss-security/2011/03/24/4
http://openwall.com/lists/oss-security/2011/04/04/50
http://secunia.com/advisories/44050
http://trac.roundcube.net/changeset/4488
http://trac.roundcube.net/wiki/Changelog
https://exchange.xforce.ibmcloud.com/vulnerabilities/66613
http://openwall.com/lists/oss-security/2011/03/24/3
http://openwall.com/lists/oss-security/2011/03/24/4
http://openwall.com/lists/oss-security/2011/04/04/50
http://secunia.com/advisories/44050
http://trac.roundcube.net/changeset/4488

Get alerted when CVE-2011-1492 or the next vulnerability affects your stack