Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory.
| Software | From | Fixed in |
|---|---|---|
| roundcube / roundcube_webmail | 1.1.1 | 1.1.1.x |
| roundcube / webmail | 1.1 | 1.1.x |
| roundcube / webmail | 1.1-beta | 1.1-beta.x |
| roundcube / webmail | 1.1-rc | 1.1-rc.x |