CVE-2017-8928

High

Published: 14/05/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Mailcow version 0.14, used in 'mailcow: dockerized' and other products, has a CSRF vulnerability.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized actions on behalf of a logged-in user, potentially leading to data loss or security breaches.

Recommendation

It is recommended to upgrade to the latest version of mailcow that addresses this vulnerability and to implement additional protections against CSRF attacks.

Other vulnerabilities in mailcow 0.14

CVE-2023-34108High
A vulnerability has been discovered in mailcow, a mail server suite, that allows an attacker to manipulate internal Dovecot variables by using specially crafted passwords during the authentication process. The issue arises from the behavior of the `passwd-verify.lua` script, which verifies user passwords during login attempts.

Original NVD description (English source)

mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.