VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 28, 2020· Updated Jun 17, 2026

CVE-2020-27742

CVE-2020-27742

Description

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Citadel/Webcit2 versions
    cpe:2.3:a:citadel:webcit:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:citadel:webcit:*:*:*:*:*:*:*:*range: <=926
    • (no CPE)range: <=926
  • Citadel/WebCitdescription

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.