Kirill Firsov shared a post  
35 w

35 w

Roundcube Secured Against RCE With Firsov’s Help
.
.
.
A high-risk vulnerability in Roundcube has been eliminated, thanks to the efforts of Kirill Firsov. The exploit allowed authenticated users to execute arbitrary commands. Now patched in versions 1.6.11 and 1.5.10, this update should be applied as soon as possible.

https://roundcube.net/news/202....5/06/01/security-upd

Security updates 1.6.11 and 1.5.10 released

Free and open source webmail software for the masses, written in PHP
Free Download Share Your Social Apps