CVE-2007-2589: CSRF
Published May 11, 2007
·Updated
Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.
Affected Software
18 affected components
Squirrelmail Squirrelmail=1.4.2
Squirrelmail Squirrelmail=1.4.6_rc1
Squirrelmail Squirrelmail=1.4.3_r3
Squirrelmail Squirrelmail=1.4.9a
Squirrelmail Squirrelmail=1.4.6
Squirrelmail Squirrelmail=1.4.7
Squirrelmail Squirrelmail=1.4.3_rc1
Squirrelmail Squirrelmail=1.4.4_rc1
Squirrelmail Squirrelmail=1.4.3
Squirrelmail Squirrelmail=1.4.1
Squirrelmail Squirrelmail=1.4.9
Squirrelmail Squirrelmail=1.4.8
Squirrelmail Squirrelmail=1.4.6_cvs
Squirrelmail Squirrelmail=1.4.0
Squirrelmail Squirrelmail=1.4.3a
Squirrelmail Squirrelmail=1.4.4
Squirrelmail Squirrelmail=1.4.3aa
Squirrelmail Squirrelmail=1.4.5
Remediation
Patch Available
Event History
May 11, 2007
CVE Published
04:20 AM
CVE Published
via MITRE·07:55 AM
Data Sourced
via MITRE·07:55 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2589?
CVE-2007-2589 has a moderate severity rating due to its ability to enable cross-site request forgery attacks on SquirrelMail.
2
How do I fix CVE-2007-2589?
To fix CVE-2007-2589, upgrade SquirrelMail to version 1.4.10 or later, which addresses the vulnerability.
3
What versions of SquirrelMail are affected by CVE-2007-2589?
CVE-2007-2589 affects SquirrelMail versions 1.4.0 through 1.4.9a.
4
What type of vulnerability is CVE-2007-2589?
CVE-2007-2589 is a cross-site request forgery (CSRF) vulnerability.
5
What impact does CVE-2007-2589 have on users?
CVE-2007-2589 allows remote attackers to send emails from arbitrary users, potentially leading to unauthorized actions.