@[email protected] to SelfhostedEnglish • 5 months agoRoundcube Webmail Flaws Allow Hackers to Steal Emails and Passwordsthehackernews.comexternal-linkmessage-square4fedilinkarrow-up194arrow-down12file-text
arrow-up192arrow-down1external-linkRoundcube Webmail Flaws Allow Hackers to Steal Emails and Passwordsthehackernews.com@[email protected] to SelfhostedEnglish • 5 months agomessage-square4fedilinkfile-text
minus-square@shadowbertlinkEnglish2•4 months agoIt’s only if you view a specifically crafted email in the web client… still worth upgrading of course.
minus-square@[email protected]OPlinkfedilinkEnglish6•4 months agoOnly? “Viewing emails in a web browser” is the entire point of roundcube. It’s trivial to send out millions of “specially created emails” looking for a victim.
minus-square@shadowbertlinkEnglish3•4 months agoTrue, but it presumably would still require the user to open them. But, I was mostly worried that just having the server installed would be enough.
It’s only if you view a specifically crafted email in the web client… still worth upgrading of course.
Only? “Viewing emails in a web browser” is the entire point of roundcube. It’s trivial to send out millions of “specially created emails” looking for a victim.
True, but it presumably would still require the user to open them.
But, I was mostly worried that just having the server installed would be enough.