CVE-2020-23776

A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on

published January 26, 2021

CVSS
—
EPSS
1%
Percentile
56.0
In the wild
Unconfirmed
What it is

A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00796 · 56.0th percentile
Published
2021-01-26T21:02Z
EPSS history
Timeline
  • 26 JAN 21:02Z
    A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on
    cvelistv5