CVE-2007-2631: CSRF
Published May 13, 2007
·Updated
Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors. NOTE: this issue might overlap CVE-2007-2589 or CVE-2002-1648.
Affected Software
1 affected component
Squirrelmail Squirrelmail<=1.4.8.4fc6
Event History
May 13, 2007
CVE Published
11:19 PM
May 14, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2631?
CVE-2007-2631 is classified as a moderate severity vulnerability due to its potential impact on user actions.
2
How does CVE-2007-2631 exploit cross-site request forgery (CSRF)?
CVE-2007-2631 allows attackers to perform actions on behalf of authenticated users by exploiting the CSRF flaw.
3
Which versions of SquirrelMail are affected by CVE-2007-2631?
CVE-2007-2631 affects SquirrelMail versions 1.4.8-4.fc6 and earlier.
4
How do I fix CVE-2007-2631?
To fix CVE-2007-2631, upgrade SquirrelMail to the latest version that addresses this vulnerability.
5
What types of attacks can CVE-2007-2631 enable?
CVE-2007-2631 can enable remote attackers to perform unauthorized actions as legitimate users.