CVE-2000-0716

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited…

published January 22, 2001

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01100 · 65.4th percentile
Published
2001-01-22T05:00Z
EPSS history
Timeline
  • 22 JAN 05:00Z
    WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited…
    cvelistv5