CVE:CVE-2021-44026
CNNVD:CNNVD-202111-1618
Roundcube Webmail是一款基于浏览器的开源IMAP客户端，它支持地址薄管理、信息搜索、拼写检查等。
Roundcube Webmail 存在SQL注入漏洞，攻击者可以通过"search"或"search_params"进行SQL注入。以下产品及版本受到影响：Roundcube before 1.3.17 and 1.4.x before 1.4.12。
solution:Upgrade roundcube webmail to a higher version than 1.3.17,1.4.12,and avoid the version (,1.3.17),[1.4.0,1.4.12); Upgrade fedoraproject fedora to a higher version than 33,34,and avoid the version 33,34; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0