Unscored CVE-2018-18655 EUVD-2018-10371GHSA-h8f8-mfm9-grf3

Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lac…

Published Oct 26, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Package: prayer Package: prayer Ecosystem: Debian Ecosystem: Ubuntu

Description

Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 11	prayer	1.3.5-dfsg1-5	—

Ubuntu