CVE-2019-9883CWE-352

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account.

published June 3, 2019

CVSS
—
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cf_new.cgi?chief=&wk_group=full&cf_name=test&cf_account=test&cf_email=&cf_acl=Management&apply_lang=&dn= without any authorizes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00669 · 51.4th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2019-06-03T18:03Z
EPSS history
Timeline
  • 03 JUN 18:03Z
    Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account.
    cvelistv5