If you’re self hosting roundcube be sure to update.

  • shadowbert@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 month ago

    It’s only if you view a specifically crafted email in the web client… still worth upgrading of course.

    • atzanteol@sh.itjust.worksOP
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      Only? “Viewing emails in a web browser” is the entire point of roundcube. It’s trivial to send out millions of “specially created emails” looking for a victim.