CVE-2017-16651
Roundcube Roundcube Webmail
Roundcube Webmail File Disclosure Vulnerability
What it is
Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Roundcube entries on the list
- Webmail RoundCube Webmail Cross-site Scripting Vulnerability CVE-2025-68461 · Feb 20, 2026
- Webmail RoundCube Webmail Deserialization of Untrusted Data Vulnerability CVE-2025-49113 · Feb 20, 2026
- Webmail RoundCube Webmail Cross-Site Scripting Vulnerability CVE-2024-42009 · Jun 9, 2025
- Webmail RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability CVE-2024-37383 · Oct 24, 2024
- Webmail Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability CVE-2020-13965 · Jun 26, 2024
- Webmail Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability CVE-2023-43770 · Feb 12, 2024