high8.8Public exploit code
CVE-2017-8928
mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Mailcow 0.14 - Cross-Site Request Forgery2017-05-15 · webapps · php
Impact
mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mailcow | Mailcow\ | Version _dockerized |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/mailcow/mailcow-dockerized/pull/268/commits/3c937f75ba5853ada175542d5c4849fb95eb64cd
- https://www.exploit-db.com/exploits/42004/
- https://github.com/mailcow/mailcow-dockerized/pull/268/commits/3c937f75ba5853ada175542d5c4849fb95eb64cd
- https://www.exploit-db.com/exploits/42004/