What’s Vulnerable › Vulnerabilities

CVE-2018-18655

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-26 · updated 2026-06-17
• Weakness: CWE-200

Description

Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting.

Affected products

• Prayer Project Prayer: through 1.3.5

References

• https://bugs.debian.org/911842
• https://telescoper.wordpress.com/2018/10/18/a-breakthrough-for-a-bigot/#comment-339386
• https://bugs.debian.org/911842
• https://telescoper.wordpress.com/2018/10/18/a-breakthrough-for-a-bigot/#comment-339386

Get alerted when CVE-2018-18655 or the next vulnerability affects your stack