Description
Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077.
Remediation
References
Related Vulnerabilities
WordPress Plugin betterAmazonAPI Cross-Site Scripting (1.2)
WordPress Plugin Gwolle Guestbook Cross-Site Scripting (2.5.3)
SharePoint Use After Free Vulnerability (CVE-2025-59222)
EspoCRM Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-33659)
WordPress Plugin Check & Log Email Cross-Site Scripting (1.0.3)