CVE Daily

CVE-2002-1710

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not chec...

Low CVSS 3.6

Overview

The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.

CWE: N/A Published: 2002-12-31T05:00:00.000
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 3.6 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags