CVE-2019-9882CWE-352

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist.

published June 3, 2019

CVSS
—
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via user/save_list.php?ACSION=&type=email&category=white&locate=big5&cmd=add&[email protected]&new_memo=&add=%E6%96%B0%E5%A2%9E without any authorizes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00669 · 51.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2019-06-03T18:03Z
EPSS history
Timeline
  • 03 JUN 18:03Z
    Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist.
    cvelistv5