CVE-2020-23776

A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacker can modify the request header 'HOST' value to cause the server to send the request.

• CWE-918

• https://github.com/zhonghaozhao/winmail/issues/3Exploit, Issue Tracking, Third Party Advisory
• https://github.com/zhonghaozhao/winmail/issues/3Exploit, Issue Tracking, Third Party Advisory

Published

Jan 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-23762Cross Site Scripting (XSS) vulnerability in the Larsens Cale…5.4
• CVE-2020-23763SQL injection in admin.php in Online Book Store 1.0 allows r…9.8
• CVE-2020-23765A file upload vulnerability was discovered in the file path …7.2
• CVE-2020-23766An arbitrary file deletion vulnerability was discovered on h…6.5
• CVE-2020-23768An information disclosure vulnerability was discovered in al…7.5
• CVE-2020-23774A reflected XSS vulnerability exists in tohtml/convert.php o…6.1
• CVE-2020-23790An Arbitrary File Upload vulnerability was discovered in the…9.8
• CVE-2020-23793An issue was discovered in spice-server spice-server-0.14.0-…8.6
• CVE-2020-23804Uncontrolled Recursion in pdfinfo, and pdftops in poppler 0.…7.5
• CVE-2020-23811xxl-job 2.2.0 allows Information Disclosure of username, mod…7.5
• CVE-2020-23814Multiple cross-site scripting (XSS) vulnerabilities in xxl-j…6.1
• CVE-2020-23824ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Requ…8.8