CVE-2020-12641—Roundcube Webmail Remote Code Execution Vulnerability

漏洞名称

Roundcube Webmail Remote Code Execution Vulnerability

描述

Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10
• https://nvd.nist.gov/vuln/detail/CVE-2020-12641

相关新闻文章

• APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in UkraineJune 24, 2025
• Russian hackers breach orgs to track aid routes to UkraineMay 21, 2025
• Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid LogisticsMay 21, 2025
• Russia-Linked APT28 Exploited MDaemon Zero-Day to Hack Government Webmail ServersMay 15, 2025

相关 CWE

• CWE-78