VULNERABILITY INTELLIGENCE

CVE-2012-3472

CVSS score6.4 MEDIUM

EPSS probability1.31%

CISA KEVNot currently listed

Published2012-08-12

Last modified2026-06-16

Description

The email API in application/libraries/api/MY_Email_Api_Object.php in the Ushahidi Platform before 2.5 does not require authentication, which allows remote attackers to list, delete, or organize messages via a GET request.