Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5f9p-654c-vw5v

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

EPSS

Процентиль: 85%
0.02624
Низкий

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 21 года назад

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

EPSS

Процентиль: 85%
0.02624
Низкий

Дефекты

CWE-200