CVE-2018-17542

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds

Medium · published February 11, 2019

CVSS v3.0
4.3
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi request.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01229 · 68.7th percentile
Published
2019-02-11T20:00Z
EPSS history
Timeline
  • 11 FEB 20:00Z
    SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds
    cvelistv5