VULNERABILITY INTELLIGENCE
CVE-2003-1481
CVSS score5.8 MEDIUM
EPSS probability1.84%
CISA KEVNot currently listed
Published2003-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:N
Description
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor