CVE-2018-18655 Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting.
MediumCVSS 4.3
EPSS 0.84%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/prayer(Ubuntu:22.04) | All versions | No fix listed |
| debian/prayer(Debian:11) | < 1.3.5-dfsg1-5 | 1.3.5-dfsg1-5 |
| prayer project prayer | <= 1.3.5 | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- security-tracker.debian.org vendor-advisory
- bugs.debian.org issue-tracking mailing-list patch third-party-advisory
- telescoper.wordpress.com not-applicable