CVE-2020-7918

An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other…

published March 27, 2020

CVSS
—
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other users via enumeration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00730 · 53.7th percentile
Published
2020-03-27T13:43Z
EPSS history
Timeline
  • 27 MAR 13:43Z
    An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other…
    cvelistv5