writeups.xyz / SSD Advisory – Roundcube MarkAsJunk RCE

Submitter : c2a

Date: 6 June 2023

Bounty : undisclosed

Vulnerabilities :

• RCE
• OS Command Injection
• Security Code Review

Programs :

• Roundcube

Authors :

• Selim Enes Karaduman (@Enesdex)

Link :
https://ssd-disclosure.com/ssd-advisory-roundcube-markasjunk-rce/