PT-2019-9117 · Totemo · Totemomail
CVE-2018-15511
·
Publicado
2019-08-29
·
Atualizado
2019-09-03
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
totemomail version 6.0.0 build 570
Description
A cross-site scripting (XSS) issue exists in the 'Notification template' feature, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system.
Recommendations
For totemomail version 6.0.0 build 570, consider disabling the 'Notification template' feature until a patch is available to prevent exploitation of the XSS issue.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Totemomail