Back
CVE-2003-1481
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote…
Medium5.8EPSS 1.8%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium5.8 | AV:N/AC:M/Au:N/C:P/I:P/A:N |
- EPSS (exploitation in 30 days)
- 1.8% · top 21% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.8.
Weakness
Affected products
n/a
- affected n/a
References (4)
- 20030504 CommuniGatePro 4.0.6 [EXPLOIT] (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 3290 (opens in a new tab)third-party-advisoryx_refsource_SREASONx_transferred
- 7501 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- communigate-pro-session-hijacking(11932) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2003-1481)Record last updated .