Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Horde IMP中 Web浏览器导致DNS提取信息泄露漏洞
Vulnerability Description
Horde IMP 4.3.6版本及其早期版本不能要求web浏览器避免包含在邮件信息中的域名的DNS事先提取,更易于远程攻击者通过登录DNS请求确定网络邮件用户的网络位置。
CVSS Information
N/A
Vulnerability Type
N/A