PT-2023-6986 · Icewarp · Icewarp Server

CVE-2023-39600

·

Publicado

2023-08-22

·

Atualizado

2023-10-20

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions IceWarp Server version 11.4.6.0
Description The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability can be exploited by a remote attacker to conduct cross-site scripting attacks via the color parameter.
Recommendations For IceWarp Server version 11.4.6.0, consider disabling the use of the color parameter until a patch is available to prevent exploitation of the cross-site scripting vulnerability.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2023-08005
CVE-2023-39600

Produtos afetados

Icewarp Server