Medium severity4.3NVD Advisory· Published Oct 26, 2018· Updated Jun 17, 2026

CVE-2018-18655

Description

Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jedisct1/Prayerinferred
Range: <=1.3.5
Prayer Project/Prayer
cpe:2.3:a:prayer_project:prayer:*:*:*:*:*:*:*:*
Range: <=1.3.5
Prayer/Prayerllm-create
Range: <=1.3.5

Patches

Vulnerability mechanics

References

bugs.debian.org/911842nvdIssue TrackingMailing ListPatchThird Party Advisory
telescoper.wordpress.com/2018/10/18/a-breakthrough-for-a-bigot/nvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000