Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-77r5-xf97-q83j

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi request.

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi request.

EPSS

Процентиль: 33%
0.00128
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 4.3
nvd
почти 7 лет назад

SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of other users within the enterprise via the select_mid parameter in an letgo.cgi request.

EPSS

Процентиль: 33%
0.00128
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-89