CVE-2020-12641
Fixed in a distro release ExploitedEPSS 84%CVSS 9.8
rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
Products: roundcube webmail, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | roundcube | 1.4.4+dfsg.1-1 |
| Debian 13 | roundcube | 1.4.4+dfsg.1-1 |
| Debian 14 | roundcube | 1.4.4+dfsg.1-1 |
| SUSE Package Hub 15 SP1 | roundcubemail | 1.3.15-bp152.4.3.1 |
| SUSE Package Hub 15 SP2 | roundcubemail | 1.3.15-bp152.4.3.1 |
| SUSE Package Hub 15 SP3 | roundcubemail | 1.5.3-bp154.2.3.1 |
| SUSE Package Hub 15 SP4 | roundcubemail | 1.5.3-bp154.2.3.1 |
| Ubuntu Pro 16.04 LTS | roundcube | 1.2~beta+dfsg.1-0ubuntu1+esm2 |
| Ubuntu Pro 18.04 LTS | roundcube | 1.3.6+dfsg.1-1ubuntu0.1~esm2 |
| Ubuntu Pro 20.04 LTS | roundcube | 1.4.3+dfsg.1-1ubuntu0.1~esm1 |
| Ubuntu Pro 20.04 LTS | roundcube | 1.4.3+dfsg.1-1ubuntu0.1~esm2 |
| Ubuntu Pro 22.04 LTS | roundcube | 1.5.0+dfsg.1-2ubuntu0.1~esm1 |
| openSUSE Leap 15.1 | roundcubemail | 1.3.15-bp152.4.3.1 |
| openSUSE Leap 15.2 | roundcubemail | 1.3.15-bp152.4.3.1 |
| openSUSE Leap 15.3 | roundcubemail | 1.5.3-bp154.2.3.1 |
| openSUSE Leap 15.4 | roundcubemail | 1.5.3-bp154.2.3.1 |
| openSUSE Tumbleweed | roundcubemail | 1.4.11-1.3 |