PT-2019-9117
CVE-2018-15511
·
Publicado
2019-08-29
·
Atualizado
2019-09-03
Descrição por
CVSS 3.1
6.1
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
totemomail version 6.0.0 build 570
Description
A cross-site scripting (XSS) issue exists in the 'Notification template' feature, allowing remote attackers to inject arbitrary web script or HTML. This could potentially lead to unauthorized actions on the affected system.
Recommendations
For totemomail version 6.0.0 build 570, consider disabling the 'Notification template' feature until a patch is available to prevent exploitation of the XSS issue.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾