PT-2019-19287 · Mdaemon · Mdaemon Webmail

Publicado 2019-02-21 · Atualizado 2019-02-21 · CVE-2019-8984

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MDaemon Webmail versions 14.x through 18.x before 18.5.2

Description A cross-site scripting (XSS) issue allows attackers to affect the system. This is a type of security vulnerability that can enable an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or control of user sessions.

Recommendations For MDaemon Webmail versions 14.x through 18.x before 18.5.2, update to version 18.5.2 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-8984

Produtos afetados

Mdaemon Webmail

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-8984 · Aviso do Fabricante
• https://altn.com/Support/SecurityUpdate/MD021519_MDaemon_EN · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-8984 · Nota de Segurança