PT-2021-21661
CVE-2021-37448
·
تاريخ النشر
2021-07-25
·
تاريخ التحديث
2021-08-04
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
NCH IVM Attendant versions 5.12 and earlier
Description
Cross Site Scripting (XSS) exists in the software via the
Mailbox name (stored). This issue allows for the execution of malicious scripts.Recommendations
For versions 5.12 and earlier, update to a version later than 5.12 to resolve the issue. As a temporary workaround, consider restricting access to the
Mailbox name field to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾