Comment on Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords
shadowbert@lemmy.world 5 weeks ago
It’s only if you view a specifically crafted email in the web client… still worth upgrading of course.
Comment on Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords
shadowbert@lemmy.world 5 weeks ago
It’s only if you view a specifically crafted email in the web client… still worth upgrading of course.
atzanteol@sh.itjust.works 5 weeks ago
Only? “Viewing emails in a web browser” is the entire point of roundcube. It’s trivial to send out millions of “specially created emails” looking for a victim.
shadowbert@lemmy.world 5 weeks ago
True, but it presumably would still require the user to open them.
But, I was mostly worried that just having the server installed would be enough.