CVE-2011-1491

CVE-2011-1491 describes a "login CSRF" vulnerability in Roundcube Webmail versions prior to 0.5.1. This flaw allows an authenticated attacker to trick a victim into logging into the attacker's account, potentially exposing sensitive information if the victim then composes an email. The vulnerability has a CVSS score of 3.5, indicating a medium attack complexity and requiring authentication, with a partial impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.