CVE-2018-18655
Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting.
Published: 2018-10-26 · CVSS: Unscored
Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7