Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2017-8928

Published: 14/05/2017 Updated: 02/10/2019
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Mailcow

Vulnerability Summary

mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mailcow mailcow\\ _dockerized

Exploits

Exploit DB: Mailcow 0.14 - Cross-Site Request Forgery
[+] Credits: John Page aka hyp3rlinx [+] Website: hyp3rlinxaltervistaorg [+] Source: hyp3rlinxaltervistaorg/advisories/MAILCOW-v014-CSRF-PASSWORD-RESET-ADD-ADMINtxt [+] ISR: ApparitionSec Vendor: ============= mailcowemail mailcowgithubio Product: =========== The integrated mailcow UI allows administrative wor ...
Exploit DB: MailCow 0.14 Cross Site Request Forgery
MailCow version 014 suffers from multiple cross site request forgery vulnerabilities ...

References

CWE-352https://github.com/mailcow/mailcow-dockerized/pull/268/commits/3c937f75ba5853ada175542d5c4849fb95eb64cdhttps://www.exploit-db.com/exploits/42004/https://nvd.nist.govhttps://www.exploit-db.com/exploits/42004/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook