CVE-2023-5631

Vulnerability updated 4 months ago (2024-05-04T20:57:34.892Z)

Download STIX

Preview STIX

CVE-2023-5631 is a software vulnerability that was identified and reported by ESET CNA on October 18, 2023. This flaw exists in the design or implementation of Roundcube webmail servers. The vulnerability can be exploited through specially crafted email messages, posing significant security risks. The Advanced Persistent Threat (APT) group known as Winter Vivern has been exploiting this zero-day vulnerability to infiltrate and spy on European governmental entities and a think tank. Their activities have been extensively analyzed, revealing a sophisticated attack sequence which leverages CVE-2023-5631 to gain unauthorized access to sensitive information. This discovery underscores the persistent threat posed by Winter Vivern, particularly in light of their exploitation of the Roundcube zero-day vulnerability. It highlights the necessity for prompt action to address such vulnerabilities, given their potential misuse by malicious actors targeting government institutions and other high-profile organizations.

Description last updated: 2024-05-04T16:05:02.442Z

What's your take? (Question 1 of 4)

Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.

Aliases We are not currently tracking any aliases

Miscellaneous Associations

Other elements of context that could aid in the identification of relevance

Vulnerability

roundcube

Eset

Exploit

Analyst Notes & Discussion

Be the first to leave your mark here! Log in to share your views and vote.

Associated Vulnerabilities

To see the evidence that has resulted in these vulnerability associations, create a free account

ID	Type	Votes	Profile Description
CVE-2020-35730	is related to	2	CVE-2020-35730 is a Cross-Site Scripting (XSS) vulnerability in Roundcube Webmail, first discovered three years ago. The flaw has been actively exploited by threat actors in various campaigns. In the BlueDelta and APT28 campaigns, spear-phishing techniques were employed, with email attachments desig

Source Document References

Information about the CVE-2023-5631 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more

Source Link	CreatedAt	Title
CERT-EU	10 months ago	Winter Vivern APT Blasts Webmail Zero-Day Bug With One-Click Exploit
CERT-EU	10 months ago	Google: Hackers exploited Zimbra zero-day in attacks on govt orgs
CERT-EU	10 months ago	Winter Vivern’s Roundcube Zero-Day Exploits
CERT-EU	10 months ago	Week in review: VMware patches critical vulnerability, 1Password affected by Okta breach - Help Net Security
ESET	10 months ago	Roundcube zero-day exploited in attacks on European governments – Week in security with Tony Anscombe
CERT-EU	10 months ago	European Governments Email Servers Targeted by Threat Actors
CISA	10 months ago	CISA Adds One Known Exploited Vulnerability to Catalog \| CISA
CERT-EU	10 months ago	Sources detail the rushed timeline for the UK's AI Summit, its expanded scope, which now covers everything from healthcare to deepfakes, and more
CERT-EU	10 months ago	In a testimony without the jury present, SBF says he followed the counsel of lawyers to make critical decisions around passing FTX customer money to Alameda
CERT-EU	10 months ago	Cranium, which provides enterprise AI security and trust software and spun out of KPMG in April 2023, raised a $25M Series A led by Telstra Ventures
CERT-EU	10 months ago	Cruise pauses all driverless operations two days after the California DMV suspended its permits, but will continue operating supervised autonomous vehicles
BankInfoSecurity	10 months ago	Breach Roundup: Winter Vivern Hunting For Emails
CERT-EU	10 months ago	Michigan-based Censys, which monitors internet hosts and their security statuses, raised a $50M Series C and $25M in debt, taking its total funding to $128.1M
CERT-EU	10 months ago	A recap of FTX co-founder Sam Bankman-Fried's testimony at his own criminal fraud trial in NYC over the collapse of his cryptocurrency exchange
CERT-EU	10 months ago	OpenAI forms Preparedness, a new team to assess, evaluate, and probe AI models to protect against “catastrophic risks”, including biological and nuclear threats
CERT-EU	10 months ago	Amazon Q3: ad services revenue up 26% YoY to $12.1B, vs. $11.6B est., North American sales up 11% YoY to $87.9B, and International sales up 16% YoY to $32.1B
CERT-EU	10 months ago	X's tumultuous first year under Elon Musk: mobile DAUs down 16% from October 2022 to September 2023, app downloads fell after X rebrand, and investor markdowns
CERT-EU	10 months ago	Roundcube 0-day used to steal European government emails
CERT-EU	10 months ago	Russian hacking group seen exploiting Roundcube webmail zero-day
Securityaffairs	10 months ago	Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks