CVE-2017-8928

CVE-2017-8928 affects Mailcow 0.14 (as used in mailcow: dockerized and related products). The security issue is Cross-Site Request Forgery (CSRF) in the admin UI, enabling an authenticated user to trigger privileged actions via a malicious page. Documented impact includes: reset admin password, a...

MailCow 0.14 Cross Site Request Forgery

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MAILCOW-v0.14-CSRF-PASSWORD-RESET-ADD-ADMIN.txt + ISR: ApparitionSec Vendor: ============= mailcow.email mailcow.github.io Product: =========== The integrated mailcow UI...