cve.bz

CVE-2020-7918

5.4 mediumEPSS 0.7%

Medium (5.4) in totemo totemomail. EPSS 0.7% chance of exploitation in the next 30 days.

An insecure direct object reference in webmail in totemo totemomail 7.0.0 allows an authenticated remote user to read and modify mail folder names of other users via enumeration.

Severity

CVSS 3.1

5.4 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE
CWE-639
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON