PT-2019-9118
CVE-2018-15512
·
تاريخ النشر
2019-08-29
·
تاريخ التحديث
2019-09-03
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
totemomail version 6.0.0 build 570
Description
A cross-site scripting (XSS) issue exists in the 'Authorisation Service' feature, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system.
Recommendations
For totemomail version 6.0.0 build 570, consider disabling the 'Authorisation Service' feature until a patch is available to prevent exploitation of the XSS issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾