🎯 New Report #3913012: Persistent SMTP header injection via identity `organization` / `name`
🔺Severity: None
👽 Reporter: dogeshark
⭐️ Reputation: 411
🛠 State: resolved
💼 Team: Nextcloud
💵 Bounty: null
🕐 Submitted: 2026-08-03
⏰ Disclosed: 2026-09-18 13:24:05
📝 Summary: A vulnerability was discovered in the Roundcube webmail client that allowed persistent SMTP header injection through the identity organization and name fields. The vulnerability was caused by insufficient validation of the user-supplied input, which resulted in the unfiltered data being stored and included in the email headers when sending messages. This issue could be exploited to inject arbitrary headers, such as forged Bcc or From, which would be sent with the server's SMTP submission credentials.
📂 Report JSON File: 3913012
@hackeronereports