Количество 3
Количество 3
CVE-2026-90936
Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers' allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests.
CVE-2026-90936
Froxlor before 2.3.7 fails to properly scope sender alias lookups to t ...
GHSA-wc79-h887-58h9
Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers' allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-90936 Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers' allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests. | CVSS3: 4.3 | 0% Низкий | 3 дня назад |
| CVE-2026-90936 Froxlor before 2.3.7 fails to properly scope sender alias lookups to t ... | CVSS3: 4.3 | 0% Низкий | 3 дня назад |
| GHSA-wc79-h887-58h9 Froxlor before 2.3.7 fails to properly scope sender alias lookups to the current customer in customer_email.php. Authenticated attackers can enumerate global sender alias IDs and read other customers' allowed sender values by supplying arbitrary senderid parameters in delete confirmation requests. | CVSS3: 4.3 | 0% Низкий | 3 дня назад |
Уязвимостей на страницу