Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Citadel WebCit 安全漏洞
Vulnerability Description
Citadel WebCit是个人开发者的一个Citadel邮件和协作组件所使用的 Servlet 引擎。 Citadel WebCit 926版本及之前版本存在安全漏洞，该漏洞源于存在一个不安全的直接对象引用漏洞，攻击者可利用该漏洞通过msg确认移动模板读取其他人的电子邮件。
CVSS Information
N/A
Vulnerability Type
N/A