exploitDog

GHSA-qxp8-4ggh-j3rg

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 4.8

Описание

Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name.

Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name.

Ссылки

EPSS

Процентиль: 39%

0.00176

Низкий

4.8 Medium

CVSS3

CVE ID

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-12844

CVSS3: 4.8

nvd

больше 8 лет назад

Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name.

EPSS

Процентиль: 39%

0.00176

Низкий

4.8 Medium

CVSS3

CVE ID

Дефекты

CWE-79