PT-2026-57599

Summary An authenticated customer can read other customers' allowed sender aliases from Froxlor's sender-delete confirmation page when mail.enable allow sender is enabled. customer email.php loads allowed sender by global auto-increment senderid alone, so a customer can enumerate foreign sender...