PT-2021-17299
CVE-2021-27180
·
تاريخ النشر
2021-04-14
·
تاريخ التحديث
2021-04-21
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
MDaemon versions prior to 20.0.4
Description:
An issue was discovered in the Webmail component of MDaemon, also known as WorldClient. This issue is related to Reflected XSS, which can be exploited via a GET request. It allows an attacker to perform any action with the privileges of the attacked user.
Recommendations:
For versions prior to 20.0.4, update to version 20.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Webmail component until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾