#186 A user can change to any sender address while sending mail

[Anonymous]

Not too sure whether it is a bug or not. But as we have
observed that a normal user can change the senders
address to any address and can send the mail anyone
which will be a fake mail. The solution is probably to
prohibit the usermin user to disallow the change of
senders address in usermin.

[Jamie Cameron]

Logged In: YES
user_id=129364

Being able to edit the From: address is the default, but you
can change this by logging into Webmin and going to
Usermin -> Usermin Module Configuration -> Read Mail, and
adjusting the settings for allowed From: address.