Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.
AV:N/AC:L/Au:N/C:P/I:N/A:N
29/01/2010
by Roundcube
6 months ago