Francesco Sirocco

An issue was discovered that allows an attacker who is logged in as an agent to escalate their privileges by accessing a specially crafted URL.

The issue might allow remote attackers to hijack web sessions and consequently gain privileges via a crafted email when cookie support is disabled.