CVE-2017-16651: Roundcube Webmail File Disclosure Vulnerability
Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution