Vulnerabilities (CVE)

Filtered by vendor Roundcube Subscribe
Filtered by product Roundcube
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-19205 1 Roundcube 1 Roundcube 2018-12-13 5.0 MEDIUM 7.5 HIGH
Roundcube before 1.3.7 mishandles GnuPG MDC integrity-protection warnings, which makes it easier for attackers to obtain sensitive information, a related issue to CVE-2017-17688. This is associated with plugins/enigma/lib/enigma_driver_gnupg.php.