CVE-2017-9517

atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...

CVE-2017-9517

atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV...

CVE-2017-9517

The CVE-2017-9517 entry corresponds to a CSRF vulnerability in AtMail prior to version 7.8.0.2 that allows an attacker to upload and import users via CSV. Affected product: AtMail WebMail client/server stack. Root cause: unauthenticated cross-site request forgery enabling CSV-based user bulk oper...