High severity8.8NVD Advisory· Published Jun 3, 2019· Updated Jun 17, 2026
CVE-2019-9882
CVE-2019-9882
Description
Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to add malicious email sources into whitelist via user/save_list.php?ACSION=&type=email&category=white&locate=big5&cmd=add&new=hacker@socialengineering.com&new_memo=&add=%E6%96%B0%E5%A2%9E without any authorizes.
Affected products
3- Range: iSherlock-base
Patches
Vulnerability mechanics
References
2- surl.twcert.org.tw/MtWeJnvdExploitThird Party Advisory
- tvn.twcert.org.tw/taiwanvn/TVN-201904002nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.