Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j58m-53vx-hhw8

Опубликовано: 02 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.

Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.

EPSS

Процентиль: 17%
0.00054
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.

EPSS

Процентиль: 17%
0.00054
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79