Yüksek CVSS 7.2
CVE-2026-114730: Webmail: sunucu taraflı istek sahteciliği (SSRF)
Açıklama (NVD)
Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcube_utils::is_local_url() omitted the RFC 6052 NAT64 prefix 64:ff9b::/96, the RFC 8215 local-use NAT64 prefix 64:ff9b:1::/48 and the unspecified address ::/128, so URLs such as http://[64:ff9b::7f00:1]/ passed the filter and reached loopback, link-local and cloud metadata addresses. Upstream fixed this in the commit “Fix SSRF filter (is_local_url()) bypass via NAT64 64:ff9b::/96”.
Özet bilgiler
- Ürün
- Roundcube Webmail
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N - EPSS
- %0,37 (yüzdelik 31)
- CWE
- CWE-918
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| roundcube-webmail | 1.6.14 | — | 1.6.20 |
| roundcube-webmail | 1.7.0 | — | 1.7.5 |