Roundcube Webmail Unsafe Deserialization Vulnerability in Session Handler Allowing Arbitrary File Write

A vulnerability exists in Roundcube Webmail versions prior to 1.5.14 and 1.6.14, as well as in the 1.7 release candidate versions prior to 1.7-rc6. The issue arises from unsafe deserialization in the redis and memcache session handlers, which may enable unauthenticated attackers to write arbitrary files by exploiting crafted session data.

Impact

Exploitation of this vulnerability could lead to unauthorized file write operations on the server.

Remediation

Users can upgrade to Roundcube Webmail versions 1.5.14, 1.6.14, or 1.7-rc6 to address this vulnerability.