PT-2025-6450

CVE-2023-49780

·

Published

2025-02-12

·

Updated

2025-02-12

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions acmailer CGI versions 4.0.5 and earlier
Description A cross-site scripting issue exists, allowing an arbitrary script to be executed on the web browser of the user who accessed the management page of the affected product. This can occur when the user accesses the management page, potentially leading to unauthorized actions.
Recommendations For versions 4.0.5 and earlier, consider disabling access to the management page until a fix is available. Restrict access to the affected CGI module to minimize the risk of exploitation. Avoid using the management page in the affected product until the issue is resolved.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾