Roundcube Webmail Vulnerability Let Attackers Track Email Opens

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Roundcube Webmail Vulnerability Allows Email Open Tracking A critical Cross-Site Scripting (XSS) vulnerability has been identified in Roundcube Webmail, enabling attackers to track email opens by loading remote images. This flaw affects users who have set their preferences to block remote images, compromising their privacy. Security updates have been released to address this issue. 23 sources 26