File Disclosure Vulnerability in Roundcube Webmail by Reintroducing File-Based Attachment Plugins
CVE-2017-16651

7.8HIGH

Key Information:

Vendor: Roundcube
Status: Webmail
Vendor: CVE Published:; 9 November 2017

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 28%🦅 CISA Reported

What is CVE-2017-16651?

Certain versions of Roundcube Webmail are susceptible to a file disclosure vulnerability that allows authenticated users to access arbitrary files on the host's filesystem, including sensitive configuration files. This issue stems from insecure handling of file-based attachment plugins and specific request types. An attacker with a valid username and password can exploit this vulnerability during an active session, as evidenced by exploitation attempts in November 2017. Users are encouraged to upgrade to the patched versions to mitigate potential risks.

CISA has reported CVE-2017-16651

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2017-16651 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: Apply updates per vendor instructions.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2017-16651
Created by ropbear