| Package | Affected versions | Patched versions |
|---|---|---|
| winmail | = 6.5 |
A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free