Vulnerabilities

TI-2020-15839 CVE-2020-25848 · GHSA-qf9m-hx8v-j382

HGiga MailSherlock - Broken Authentication

MEDIUM 45

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01674 Published 2020-12-31 Fixed in 243, 114 +3 CWE-287

TI-2019-07262 CVE-2019-9883 · GHSA-84r5-qw8f-pr73

LOW 39

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00669 Published 2019-06-03 Fixed in 1.5-328, 1.5-239 +6 CWE-352

TI-2019-07261 CVE-2019-9882 · GHSA-79pw-7m53-3xmf

LOW 39

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00669 Published 2019-06-03 Fixed in 1.5-328, 1.5-239 +6 CWE-352