Cross-Site Request Forgery

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail before 1.1.5 allows remote attackers to hijack the authentication of users for requests that download attachme…CVE-2016-4069Roundcube · 2.7% likely

   CWE-352

2. An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered.CVE-2020-12626Roundcube · 2.0% likely

   CWE-352

3. Multiple cross-site request forgery (CSRF) vulnerabilities in Roundcube Webmail before 1.0.4 allow remote attackers to hijack the authentication of unspecified victims via unknown…CVE-2014-9587Roundcube · 1.9% likely

   CWE-352

4. Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that…CVE-2009-4077Roundcube · 1.3% likely

   CWE-352

5. Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that…CVE-2009-4076Roundcube · 1.3% likely

   CWE-352

6. Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin read the _uid parame…CVE-2026-114719Roundcube · CVSS 3.7 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.