CVE-2020-23776 | BDVDB-2026-148157 Detail

Description#

A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/zhonghaozhao/winmail/issues/3

Exploit#

No public exploit known

History#

Version 12021-01-26Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.