Design/Logic Flaw

2018-09-0118:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.5%

In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.

CPENameOperatorVersion
mail_serverle12.0.3.1

CPE	Name	Operator	Version
	mail_server	le	12.0.3.1

References

cxsecurity.com/issue/WLB-2018080098

packetstormsecurity.com/files/148887/IceWarp-WebMail-12.0.3.1-Cross-Site-Scripting.html