CVE-2017-8928: CSRF
Published May 14, 2017
·Updated
mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.
Affected Software
1 affected component
Mailcow Mailcow\=_dockerized-0.14
Remediation
Event History
May 14, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-8928?
CVE-2017-8928 is classified as a medium severity vulnerability due to its CSRF exploit potential.
2
How do I fix CVE-2017-8928?
To fix CVE-2017-8928, update mailcow to the latest version that addresses this vulnerability.
3
What type of vulnerability is CVE-2017-8928?
CVE-2017-8928 is a Cross-Site Request Forgery (CSRF) vulnerability.
4
Which version of mailcow is affected by CVE-2017-8928?
Mailcow version 0.14 is affected by CVE-2017-8928.
5
Can CVE-2017-8928 be exploited remotely?
Yes, CVE-2017-8928 can potentially be exploited remotely due to its CSRF nature.