exploitDog

CVE-2023-48116

Опубликовано: 21 дек. 2023

Источник: nvd

CVSS3: 5.4

EPSS Низкий

Описание

SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment.

Ссылки

https://co3us.gitbook.io/write-ups/stored-xss-in-calendar-component-of-smartermail-cve-2023-48116
Exploit
Third Party Advisory
https://www.smartertools.com/smartermail/release-notes/current
Release Notes
https://co3us.gitbook.io/write-ups/stored-xss-in-calendar-component-of-smartermail-cve-2023-48116
Exploit
Third Party Advisory
https://www.smartertools.com/smartermail/release-notes/current
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:smartertools:smartermail:*:*:*:*:*:*:*:*

Версия от 16.0.8495 (включая) до 16.0.8747 (исключая)

EPSS

Процентиль: 38%

0.00169

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-6gj8-gj3v-ccw7

CVSS3: 5.4

github

около 2 лет назад

SmarterTools SmarterMail 16.x 8495 through 8664 before 8747 allows stored XSS via a crafted description of a Calendar appointment.

EPSS

Процентиль: 38%

0.00169

Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79