PT-2019-19708
CVE-2019-9557
·
تاريخ النشر
2019-03-12
·
تاريخ التحديث
2019-03-13
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Ability Mail Server version 4.2.6
Description
The issue allows for Persistent Cross Site Scripting (XSS) via the email body. To exploit this, the victim must open an email containing malicious Javascript inserted into the body as an iframe.
Recommendations
For Ability Mail Server version 4.2.6, consider disabling the ability to insert iframes into email bodies as a temporary workaround until a patch is available. Restrict access to emails with potentially malicious content to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾