THREAT OPS › CVEs › CVE-2020-12641
CVE-2020-12641 — Roundcube Webmail Remote Code Execution Vulnerability
Roundcube Webmail contains an remote code execution vulnerability that allows attackers to execute code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.
Vulnerability details
- Affected productsRoundcube Webmail
- KEV remediation due2023-07-13