@[email protected] to SelfhostedEnglish • 1 month agoRoundcube Webmail Flaws Allow Hackers to Steal Emails and Passwordsthehackernews.comexternal-linkmessage-square4fedilinkarrow-up194arrow-down10file-text
arrow-up194arrow-down1external-linkRoundcube Webmail Flaws Allow Hackers to Steal Emails and Passwordsthehackernews.com@[email protected] to SelfhostedEnglish • 1 month agomessage-square4fedilinkfile-text
minus-square@shadowbertlinkEnglish2•1 month agoIt’s only if you view a specifically crafted email in the web client… still worth upgrading of course.
minus-square@[email protected]OPlinkfedilinkEnglish6•1 month agoOnly? “Viewing emails in a web browser” is the entire point of roundcube. It’s trivial to send out millions of “specially created emails” looking for a victim.
minus-square@shadowbertlinkEnglish3•1 month agoTrue, but it presumably would still require the user to open them. But, I was mostly worried that just having the server installed would be enough.
It’s only if you view a specifically crafted email in the web client… still worth upgrading of course.
Only? “Viewing emails in a web browser” is the entire point of roundcube. It’s trivial to send out millions of “specially created emails” looking for a victim.
True, but it presumably would still require the user to open them.
But, I was mostly worried that just having the server installed would be enough.