CVE-2015-8770: roundcube roundcube_webmail Path Traversal
Vulnerability summary
CVE-2015-8770 is a high (CVSS 7.5) Path Traversal vulnerability in roundcube roundcube_webmail. EPSS estimates a 22.43% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities. 3 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 29-01-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Directory traversal vulnerability in the set_skin function in program/include/rcmail_output_html.php in Roundcube before 1.0.8 and 1.1.x before 1.1.4 allows remote authenticated users with certain permissions to read arbitrary files or possibly execute arbitrary code via a .. (dot dot) in the _skin parameter to index.php.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
22.43%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
0.00 pp
From 22.43% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
3 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (htbridge.com)
Maturity: unknown
Roundcube Webmail 1.1.3 - Directory Traversal
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Debian1 product
- roundcube< 1.1.4+dfsg.1-1 | < 0.3.1-6+deb6u1 | < 0.7.2-9+deb7u2
Roundcube1 product
- roundcube_webmail≤ 1.0.7 | 1.1.0 | 1.1.1 | 1.1.2 | 1.1.3
Ubuntu1 product
- roundcube< 1.1.4+dfsg.1-1 | < 1.3.6+dfsg.1-1
3 vendors · 3 products
References
15 links
- trac.roundcube.net/changeset/10e5192a2b/githubX Refsource CONFIRM
- roundcube.net/news/2015/12/26/updates-1.1.4-and-1.0.8-released/X Refsource CONFIRMPatchVendor AdvisoryREPORT
- trac.roundcube.net/ticket/1490620X Refsource CONFIRM