Roundcube Webmail contains a file disclosure vulnerability caused by insufficient input validation in conjunction with file-based attachment plugins, which are used by default.
Source: NVD ↗ · CISA KEV Catalog ↗