CVE-2002-1710

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST…

published June 21, 2005

CVSS
—
EPSS
0%
Percentile
25.1
In the wild
Unconfirmed
What it is

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.1th percentile
Published
2005-06-21T04:00Z
EPSS history
Timeline
  • 21 JUN 04:00Z
    The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST…
    cvelistv5