PT-2021-17301
CVE-2021-27182
·
تاريخ النشر
2021-04-14
·
تاريخ التحديث
2021-04-21
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
MDaemon versions prior to 20.0.4
Description:
An issue was discovered in the Webmail component of MDaemon, also known as WorldClient. This issue is related to an IFRAME injection, which can be exploited via an email message. It allows an attacker to perform actions with the privileges of the attacked user.
Recommendations:
For versions prior to 20.0.4, update to version 20.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Webmail component until the update is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾