CVE-2020-35730

Roundcube Webmail XSS vulnerability exposed in 84,000 servers

An XSS vulnerability in Roundcube Webmail allows attackers to inject malicious JavaScript, exposing over 84,000 servers to remote code execution. This is a high-severity issue, as it enables attackers to send malicious emails and potentially gain control of the affected systems. DIB organizations should ensure their systems are patched and monitor for any signs of exploitation.

Shame score — The vulnerability was actively exploited, affecting a large number of servers, and the lack of a patch for over a year indicates negligence.