PT-2015-1383

CVE-2015-0915

·

Publicado

2015-05-21

·

Atualizado

2015-05-22

Descrição por

CVSS 2.0
4.3
Média
MétricasAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions RAKUS MailDealer versions 11.2.1 and earlier
Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability can be exploited by a remote attacker to inject arbitrary web script or HTML code. The exploitation can occur through a specially crafted attachment filename.
Recommendations For RAKUS MailDealer versions 11.2.1 and earlier, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the handling of attachment filenames to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾