Roundcube Webmail rcube_image.php参数注入漏洞

详细信息

漏洞类型

代码注入

漏洞描述

Roundcube Webmail是一款基于浏览器的开源IMAP客户端，它支持地址薄管理、信息搜索、拼写检查等。Roundcube Webmail 1.4.4之前版本可能允许远程攻击者在系统上执行任意代码。通过使用m_convert_path或im_identity_path参数向rcube_image.php发送精心编制的请求，攻击者可以使用shell元字符在系统上执行任意代码，从而利用此漏洞进行攻击。

修复建议

有关补丁、升级或建议的解决方法信息，请参阅roundcubemail GIT存储库： https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10

参考链接

• https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10

  OSV · x_refsource_MISC

• https://github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4

  OSV · x_refsource_MISC

• https://github.com/roundcube/roundcubemail/releases/tag/1.4.4

  OSV · x_refsource_MISC

• https://github.com/roundcube/roundcubemail/commit/fcfb099477f353373c34c8a65c9035b06b364db3

  OSV · x_refsource_MISC

• https://vigilance.fr/vulnerability/RoundCube-Webmail-two-vulnerabilities-32218
• https://nvd.nist.gov/vuln/detail/CVE-2020-12641
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00083.html

  OSV · vendor-advisory · x_refsource_SUSE

• https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2020-12641-Command%20Injection-Roundcube

  OSV · x_refsource_MISC

• https://security.gentoo.org/glsa/202007-41

  OSV · vendor-advisory · x_refsource_GENTOO

• https://osv.dev/vulnerability/BIT-roundcube-2020-12641

  OSV

• https://osv.dev/vulnerability/CVE-2020-12641

  OSV

• https://security-tracker.debian.org/tracker/CVE-2020-12641

  OSV

• https://ubuntu.com/security/CVE-2020-12641

  OSV

• https://ubuntu.com/security/notices/USN-5182-1

  OSV

• https://www.cve.org/CVERecord?id=CVE-2020-12641

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2020-12641

  OSV

• https://osv.dev/vulnerability/DEBIAN-CVE-2020-12641

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-12641

  NVD · US Government Resource