high8.8
CVE-2017-9518
atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.
Impact
atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atmail | Atmail | through 7.8.0.1 |