https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 28 Oct 2026 09:42:35 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-23984 cnvd-2019-23984 https://cve.radiocsirt.org/vuln/cnvd-2019-23984 https://cve.radiocsirt.org/vuln/euvd-2026-55351 EUVD-2026-55351 https://cve.radiocsirt.org/vuln/euvd-2026-55351 https://cve.radiocsirt.org/vuln/fkie_cve-2019-12923 <p>In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an attacker to manipulate a user into unwittingly performing actions within the application (such as sending email, adding contacts, or changing settings) on behalf of the attacker.</p> <p>In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an attacker to manipulate a user into unwittingly performing actions within the application (such as sending email, adding contacts, or changing settings) on behalf of the attacker.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-12923 https://cve.radiocsirt.org/vuln/ghsa-2fvq-gwm3-84c2 <p>In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an attacker to manipulate a user into unwittingly performing actions within the application (such as sending email, adding contacts, or changing settings) on behalf of the attacker.</p> <p>In MailEnable Enterprise Premium 10.23, the potential cross-site request forgery (CSRF) protection mechanism was not implemented correctly and it was possible to bypass it by removing the anti-CSRF token parameter from the request. This could allow an attacker to manipulate a user into unwittingly performing actions within the application (such as sending email, adding contacts, or changing settings) on behalf of the attacker.</p> https://cve.radiocsirt.org/vuln/ghsa-2fvq-gwm3-84c2 https://cve.radiocsirt.org/vuln/gsd-2019-12923 gsd-2019-12923 https://cve.radiocsirt.org/vuln/gsd-2019-12923