CVE-2020-7918

概要

参考情報

• objectif-securite.ch/2020/03/20/IDOR-totemo-mail-folder.html · Third Party Advisory
• totemo.com/en/solutions/email-encryption · Product

totemomail のその他の脆弱性

• CVE-2024-28063中 6.1Kiteworks Totemomail through 7.0.0 allows /responsiveUI/EnvelopeOpenServlet envelopeRecipient reflected XSS.
• CVE-2018-15513中 5.3Log viewer in totemomail 6.0.0 build 570 allows access to sessionIDs of high privileged users by leveraging access to a read-only auditor ro…
• CVE-2018-15512中 6.1Cross-site scripting (XSS) vulnerability in the 'Authorisation Service' feature of totemomail 6.0.0 build 570 allows remote attackers to inj…
• CVE-2018-15511中 6.1Cross-site scripting (XSS) vulnerability in the 'Notification template' feature of totemomail 6.0.0 build 570 allows remote attackers to inj…
• CVE-2018-15510中 6.1Cross-site scripting (XSS) vulnerability in the 'Certificate' feature of totemomail 6.0.0 build 570 allows remote attackers to inject arbitr…