CVE-2011-1492 Server-side request forgery in n/a
Authenticated attackers can trigger arbitrary outbound TCP connections from the server, potentially exposing sensitive information via crafted CSS requests.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-1492?
CVE-2011-1492 is a medium-severity server-side request forgery vulnerability in Roundcube Webmail, published on 8 Apr 2011. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
steps/utils/modcss.inc in Roundcube Webmail before 0.5.1 does not properly verify that a request is an expected request for an external Cascading Style Sheets (CSS) stylesheet, which allows remote authenticated users to trigger arbitrary outbound TCP connections from the server, and possibly obtain sensitive information, via a crafted request.
Weakness: CWE-20
Which versions are affected by CVE-2011-1492?
It affects 1 product.
Products include Roundcube Webmail.
How do I fix CVE-2011-1492?
Upgrade to a fixed version.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2011-1492 being exploited?
There is no known exploitation of CVE-2011-1492 in the wild and no public exploit code.
Other vulnerabilities in Roundcube Webmail
Sources
Also known as DEBIAN-CVE-2011-1492, GHSA-r646-w9ph-62w9.