Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g9xm-ww44-j6j9

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

EPSS

Процентиль: 49%
0.0026
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
почти 16 лет назад

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

redhat
почти 16 лет назад

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

nvd
почти 16 лет назад

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

debian
почти 16 лет назад

Horde IMP 4.3.6 and earlier does not request that the web browser avoi ...

EPSS

Процентиль: 49%
0.0026
Низкий

Дефекты

CWE-200