CVE-2020-27742

Published: Oct 28, 2020Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.

Affected (1)

Products: Citadel: Webcit

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Citadel Webcit	Up to 926

Related CWEs

Authorization Bypass Through User-Controlled Key

The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

References (4)

http://uncensored.citadel.org/readfwd?go=Citadel%20Security?start_reading_at=4592834

Source: cve@mitre.org

ExploitVendor Advisory

https://www.citadel.org/

Source: cve@mitre.org

Vendor Advisory

http://uncensored.citadel.org/readfwd?go=Citadel%20Security?start_reading_at=4592834

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

https://www.citadel.org/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.