Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Basic Webmail Project Clear all filters
TI-2012-04686 CVE-2012-5570 · GHSA-9qw9-whmc-5f73

Information disclosure in Basic webmail module

Priority LOW 22

The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0111 Published 2020-02-08 Fixed in 6.x-1.2 CWE-200