high8.8
CVE-2017-9517
atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.
Impact
atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atmail | Atmail | through 7.8.0.1 |