Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, or (3) logs directory.
- https://github.com/roundcube/roundcubemail/issues/4816
No PoCs found on GitHub currently.