Логотип exploitDog
bind:CVE-2002-1710
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2002-1710

Количество 2

Количество 2

nvd логотип

CVE-2002-1710

около 23 лет назад

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.

CVSS2: 3.6
EPSS: Низкий
github логотип

GHSA-fx7c-68rf-m678

почти 4 года назад

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2002-1710

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.

CVSS2: 3.6
0%
Низкий
около 23 лет назад
github логотип
GHSA-fx7c-68rf-m678

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.

0%
Низкий
почти 4 года назад

Уязвимостей на страницу