PT-2019-18471 · Zarafa+1 · Zarafa Webapp+1

Publicado 2019-04-11 · Atualizado 2019-04-26 · CVE-2019-7219

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Zarafa Webapp versions 2.0.1.47791 and earlier

Description The issue is related to unauthenticated reflected cross-site scripting (XSS). This means that an attacker can inject malicious code into a website, which will then be executed by the user's browser. The problem was fixed in later versions of Zarafa Webapp, but some users have migrated to the related Kopano product.

Recommendations For Zarafa Webapp versions 2.0.1.47791 and earlier, consider upgrading to a later version of Zarafa Webapp or migrating to the Kopano product to resolve the issue. As a temporary workaround, consider restricting access to the Zarafa Webapp to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-7219

Produtos afetados

Kopano

Zarafa Webapp

Referências · 4

• 🔥 https://github.com/verifysecurity/CVE-2019-7219 · Exploit
• https://osv.dev/vulnerability/CVE-2019-7219 · Aviso do Fabricante
• https://stash.kopano.io/repos?visibility=public · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-7219 · Nota de Segurança