← All advisories

High severity8.8NVD Advisory· Published Jun 8, 2017· Updated Jun 17, 2026

CVE-2017-9518

CVE-2017-9518

Description

atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.

Affected products

1

Atmail/Atmail
cpe:2.3:a:atmail:atmail:*:*:*:*:*:*:*:*
Range: <=7.8.0.1

Patches

Vulnerability mechanics

References

1

help.atmail.com/hc/en-us/articles/115007169147-Minor-Update-7-8-0-2-ActiveSync-2-3-6nvdVendor Advisory

News mentions

0

No linked articles in our index yet.

CVE-2017-9518 · High · VYPR