Qualitia Active! Mail 6 Cross-Site Request Forgery Vulnerability

Vulnerability

A cross-site request forgery (CSRF) vulnerability exists in Active! Mail 6 versions through 6.60.06008562. This vulnerability allows unintended emails to be sent if a user, while logged in, accesses a specially crafted URL.

Impact

Exploitation of this vulnerability could result in the unauthorized sending of emails from the user's account.

Remediation

Users are advised to update Active! Mail 6 to the latest version, 6.61.01008654. Alternatively, the latest version can be used with an updated compatible browser.

Added: Jul 2, 2025, 5:18 AM
Updated: Jul 2, 2025, 5:18 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
0.6
exploitability
6.0
remediation
7.7
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.