CVE-2009-4077 — Cross-Site Request Forgery in Webmail

CWE-352 — Cross-Site Request Forgery13 documents7 sources
Severity
6.8MEDIUMNVD
EPSS
0.2%
top 56.25%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Roundcube Webmail
Timeline
PublishedNov 25
Latest updateMay 2

Description

Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

▶NVDroundcube/webmail0.2.2+4

🔴Vulnerability Details

6
GHSA
GHSA-h6j9-j53q-787q: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0↗2022-05-02
▶
GHSA
GHSA-3x6m-2c7f-cf47: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0↗2022-05-02
▶
OSV
CVE-2009-4077: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0↗2009-11-25
▶
OSV
CVE-2009-4076: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0↗2009-11-25
▶
CVEList
CVE-2009-4076: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0↗2009-11-25
▶

📋Vendor Advisories

4
Red Hat
Webmail: Multiple CSRF flaws↗2009-11-04
▶
Red Hat
Webmail: Multiple CSRF flaws↗2009-11-04
▶
Debian
CVE-2009-4076: roundcube - Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and e...↗2009
▶
Debian
CVE-2009-4077: roundcube - Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and e...↗2009
▶

💬Community

1
Bugzilla
CVE-2009-4076 CVE-2009-4077 RoundCube Webmail: Multiple CSRF flaws↗2009-11-26
▶
CVE-2009-4077 — Cross-Site Request Forgery in Webmail | cvebase