Back to CVE Browser

CVE-2020-10511

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1600%

EPSS Percentile39.17th

PublishedApr 15, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functionality via a crafted URL.

Affected Platforms (CPE)

📦

Hgiga

Oaklouds Ccm\@il

All versions

References & Advisories

🔗 https://gist.github.com/tonykuo76/7d41c414f23ef1e47c97f7b97e1b33b0

🔗 https://www.chtsecurity.com/news/19400b04-ea92-4eaa-afa7-2449fd9b2e0b

🔗 https://www.twcert.org.tw/tw/cp-132-3535-e40ec-1.html

🔗 https://gist.github.com/tonykuo76/7d41c414f23ef1e47c97f7b97e1b33b0

🔗 https://www.chtsecurity.com/news/19400b04-ea92-4eaa-afa7-2449fd9b2e0b

🔗 https://www.twcert.org.tw/tw/cp-132-3535-e40ec-1.html

Related Vulnerabilities

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...

CVE-2026-487237.8

The browserstack-cypress-cli is BrowserStack's CLI which allows users to run Cypress tests on BrowserStack. Versions prior to 1.36...