CVE-2015-5383: Roundcube Webmail

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory.

Affected products

• Roundcube Roundcube Webmail: version 1.1.1 only
• Roundcube Webmail: version 1.1 only

Published 2017-05-23. Last modified 2026-06-17.