PT-2018-19280 · Squirrelmail · Squirrelmail

Published 2018-08-31 · Updated 2018-08-31

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions squirrelmail (affected versions not specified)

Description A security issue was discovered where certain special tags were not properly filtered, allowing for a potential XSS attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2018-0357

Affected Products

Squirrelmail

References · 5

• https://osv.dev/vulnerability/MGASA-2018-0357 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0357.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=23366 · Note
• https://sourceforge.net/p/squirrelmail/bugs/2831 · Note
• http://openwall.com/lists/oss-security/2018/07/26/2 · Note