roundcube-installer-exposure: Roundcube Webmail Installer - Exposure

2026-01-08 Roundcube Webmail Installer PoC Public

Description

Detects exposure of the Roundcube Webmail installer interface. Public access to this installer may allow attackers to reconfigure the webmail application, potentially leading to email account compromise or the disclosure of sensitive configuration details.

PoC

id: roundcube-installer-exposure

info:
  name: Roundcube Webmail Installer - Exposure
  author: theamanrawat
  severity: high
  description: |
    Detects exposure of the Roundcube Webmail installer interface. Public access to this installer may allow attackers to reconfigure the webmail application, potentially leading to email account compromise or the disclosure of sensitive configuration details.
  reference:
    - https://roundcube.net/
    - https://github.com/roundcube/roundcubemail/wiki/Installation
  metadata:
    verified: true
    max-request: 2
  tags: roundcube,webmail,installer,config,misconfig,exposure,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/installer/"
      - "{{BaseURL}}/installer/index.php?_step=2"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_all(body, "Roundcube Webmail Installer", "wiki/Installation", "General configuration")'
        condition: and
# digest: 4b0a00483046022100941e83a2f629e9754cd1fff05dc693d6777e44edf4cd59233f0b49e16af0d6ef022100f001a87ea7acf65f9236b1cbd55b3800d4c8f298808c65d8cff4f52735feacd2:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/installer/roundcube-installer-exposure.yaml

References

Related Vulnerabilities