CVE-2024-55218

Name of the Vulnerable Software and Affected Versions IceWarp Server version 10.2.1

Description The issue is related to Cross Site Scripting (XSS) and can be exploited via the meta parameter. This allows for malicious scripts to be injected into websites, potentially leading to unauthorized access or control.

Recommendations For IceWarp Server version 10.2.1, consider restricting access to the meta parameter until a patch is available. As a temporary workaround, avoid using the meta parameter in sensitive operations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.