{"id":"CVE-2017-16651","vendor_project":"Roundcube","product":"Roundcube Webmail","vulnerability_name":"Roundcube Webmail File Disclosure Vulnerability","date_added":"2021-11-03","due_date":"2022-05-03","known_ransomware_use":"Unknown","short_description":"Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.","required_action":"Apply updates per vendor instructions.","cwes":"CWE-552","cvss_version":"3.1","cvss_severity":"HIGH","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","nvd_published":"2017-11-09","nvd_status":"Analyzed","epss":0.36668,"epss_percentile":0.98433,"cvss_score":7.8,"days_published_to_kev":1455,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2017-16651","by":"CyberMax"}