CVE-2023-5631

Vulnerability updated 5 months ago (2024-05-04T20:57:34.892Z)
Download STIX
Preview STIX
CVE-2023-5631 is a software vulnerability that was identified and reported by ESET CNA on October 18, 2023. This flaw exists in the design or implementation of Roundcube webmail servers. The vulnerability can be exploited through specially crafted email messages, posing significant security risks. The Advanced Persistent Threat (APT) group known as Winter Vivern has been exploiting this zero-day vulnerability to infiltrate and spy on European governmental entities and a think tank. Their activities have been extensively analyzed, revealing a sophisticated attack sequence which leverages CVE-2023-5631 to gain unauthorized access to sensitive information. This discovery underscores the persistent threat posed by Winter Vivern, particularly in light of their exploitation of the Roundcube zero-day vulnerability. It highlights the necessity for prompt action to address such vulnerabilities, given their potential misuse by malicious actors targeting government institutions and other high-profile organizations.
Description last updated: 2024-05-04T16:05:02.442Z
What's your take? (Question 1 of 4)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Vulnerability
roundcube
Eset
Exploit
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Vulnerabilities
To see the evidence that has resulted in these vulnerability associations, create a free account
Alias DescriptionAssociation TypeVotes
The CVE-2020-35730 Vulnerability is associated with CVE-2023-5631. CVE-2020-35730 is a Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail, first discovered three years ago. The flaw has been actively exploited by threat actors in various campaigns. In the BlueDelta and APT28 campaigns, spear-phishing techniques were employed, with email attachments desigis related to
2
Source Document References
Information about the CVE-2023-5631 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
ESET
a year ago
CERT-EU
a year ago
CISA
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
BankInfoSecurity
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
Securityaffairs
a year ago