Semaine du 4 mai au 10 mai 2020
1 CVE
-
Roundcube webmail · Opensuse backports sle · Opensuse leap
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.