VYPR
and stealing cookies .","datePublished":"2021-12-08T20:15:07.78Z","dateModified":"2026-06-17T03:59:02.933Z","publisher":{"@type":"Organization","@id":"https://portal.vyprsec.ai#publisher","name":"VYPR","url":"https://portal.vyprsec.ai","logo":{"@type":"ImageObject","url":"https://portal.vyprsec.ai/icon.svg","width":64,"height":64},"description":"Real-time CVE intelligence newsroom — feeds, exploits, vendor advisories, and AI-synthesized insights."},"author":{"@type":"Organization","@id":"https://portal.vyprsec.ai#publisher","name":"VYPR","url":"https://portal.vyprsec.ai","logo":{"@type":"ImageObject","url":"https://portal.vyprsec.ai/icon.svg","width":64,"height":64},"description":"Real-time CVE intelligence newsroom — feeds, exploits, vendor advisories, and AI-synthesized insights."},"proficiencyLevel":"Expert","about":{"@type":"Thing","@id":"https://nvd.nist.gov/vuln/detail/CVE-2021-36720","name":"CVE-2021-36720","identifier":"CVE-2021-36720","description":"PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url= and stealing cookies .","additionalType":"https://schema.org/SoftwareApplication","sameAs":["https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36720"]},"keywords":"CVE-2021-36720, Medium, CWE-79, Cybonet PineApp - Mail Secure, Pineapp Mail Secure, Pineapp Mail Secure","mentions":[{"@type":"SoftwareApplication","name":"PineApp - Mail Secure","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Cybonet"}},{"@type":"SoftwareApplication","name":"Mail Secure","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Pineapp"}},{"@type":"SoftwareApplication","name":"Mail Secure","applicationCategory":"SecurityApplication","publisher":{"@type":"Organization","name":"Pineapp"}}],"isAccessibleForFree":true},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://portal.vyprsec.ai/"},{"@type":"ListItem","position":2,"name":"CVEs","item":"https://portal.vyprsec.ai/cves"},{"@type":"ListItem","position":3,"name":"CVE-2021-36720","item":"https://portal.vyprsec.ai/cves/CVE-2021-36720"}]}]}
← All advisories
Medium severity6.1NVD Advisory· Published Dec 8, 2021· Updated Jun 17, 2026

CVE-2021-36720

CVE-2021-36720

Description

PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url= and stealing cookies .

Affected products

3
  • Cybonet/PineApp - Mail Securev5
    Range: PineApp - Mail Secure Latest
  • Pineapp/Mail Securellm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • cpe:2.3:a:pineapp:mail_secure:*:*:*:*:*:*:*:*range: <5.2.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.