PT-2022-19563
CVE-2022-29360
·
تاريخ النشر
2022-04-22
·
تاريخ التحديث
2023-05-28
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
RainLoop versions through 1.6.0
Description
The issue allows for XSS via a crafted email message in the Email Viewer. This can potentially be exploited to steal users' emails.
Recommendations
For versions through 1.6.0, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the use of the Email Viewer until a patch is available. Avoid using the Email Viewer with crafted email messages until the issue is resolved.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾