CVE-2019-15237

Published August 20th, 2019

View on NVD ↗

CVSS v3

7.4

HIGH

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.

roundcube/roundcubemail

The Roundcube Webmail suite

GitHub

7K