Homograph Attack Vulnerability in Roundcube Webmail by Roundcube

CVE-2019-15237

What is CVE-2019-15237?

Roundcube Webmail versions up to 1.3.9 are susceptible to a vulnerability that improperly processes Punycode encoded domain names. This flaw can be exploited in homograph attacks, where deceptive domain names are played on visual similarities to trick users into clicking links that lead to malicious websites. It is crucial for users and administrators to update their Roundcube installations to mitigate these risks and enhance security.

References