High severity8.8NVD Advisory· Published Jun 3, 2019· Updated Jun 17, 2026

CVE-2019-9882

Description

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via user/save_list.php?ACSION=&type=email&category=white&locate=big5&cmd=add&[email protected]&new_memo=&add=%E6%96%B0%E5%A2%9E without any authorizes.

Affected products

Hgiga/Msr35 Isherlock Base
cpe:2.3:a:hgiga:msr35_isherlock-base:*:*:*:*:*:*:*:*
Range: <1.5.328
Hgiga/Msr35 Isherlock Sysinfo
cpe:2.3:a:hgiga:msr35_isherlock-sysinfo:*:*:*:*:*:*:*:*
Range: <1.5.196
Hgiga/Msr35 Isherlock User
cpe:2.3:a:hgiga:msr35_isherlock-user:*:*:*:*:*:*:*:*
Range: <1.5.127
Hgiga/Msr35 Isherlock Useradmin
cpe:2.3:a:hgiga:msr35_isherlock-useradmin:*:*:*:*:*:*:*:*
Range: <1.5.239
Hgiga/Msr45 Isherlock Base
cpe:2.3:a:hgiga:msr45_isherlock-base:*:*:*:*:*:*:*:*
Range: <4.5-206
Hgiga/Msr45 Isherlock Sysinfo
cpe:2.3:a:hgiga:msr45_isherlock-sysinfo:*:*:*:*:*:*:*:*
Range: <4.5-109
Hgiga/Msr45 Isherlock User
cpe:2.3:a:hgiga:msr45_isherlock-user:*:*:*:*:*:*:*:*
Range: <4.5-81
Hgiga/Msr45 Isherlock Useradmin
cpe:2.3:a:hgiga:msr45_isherlock-useradmin:*:*:*:*:*:*:*:*
Range: <4.5-106
Oaklouds/Mailsherlock Msr35v5
Range: iSherlock-base
MailSherlock/MSR35llm-fuzzy
MailSherlock/MSR45llm-fuzzy

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2019-9882

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions