PT-2019-18463
CVE-2019-7211
·
Published
2019-04-24
·
Updated
2019-04-29
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SmarterTools SmarterMail versions 16.x before build 6995
Description
The issue allows JavaScript code to be executed on the application, potentially leading to stored XSS. This can occur when a user opens a malicious email or views a malicious file attachment.
Recommendations
For versions 16.x before build 6995, update to build 6995 or later to resolve the issue. As a temporary workaround, consider restricting access to email and file attachments from untrusted sources until the update is applied.
Found an issue in the description? Have something to add? Feel free to write us 👾