Roundcube Secured Against RCE With Firsov’s Help
.
.
.
A high-risk vulnerability in Roundcube has been eliminated, thanks to the efforts of Kirill Firsov. The exploit allowed authenticated users to execute arbitrary commands. Now patched in versions 1.6.11 and 1.5.10, this update should be applied as soon as possible.
https://roundcube.net/news/202....5/06/01/security-upd