| Package | Affected versions | Patched versions |
|---|---|---|
| communigate pro | = 3.1= 3.2.4= 3.2_b5= 3.2_b7= 3.3.2= 3.3_b1= 3.3_b2= 3.4_b3= 4.0.1= 4.0.2= 4.0.3= 4.0.6= 4.0_b2= 4.0_b3 |
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free