PT-2022-23881 · Mdaemon Technologies · Mdaemon Technologies Securitygateway For Email Servers

Published 2022-08-25 · Updated 2022-08-27 · CVE-2022-37238

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions MDaemon Technologies SecurityGateway for Email Servers version 8.5.2

Description The issue is related to Cross Site Scripting (XSS) and can be exploited via the currentRequest parameter. This allows for malicious scripts to be injected into otherwise trusted websites, potentially leading to unauthorized access or control of user sessions.

Recommendations For MDaemon Technologies SecurityGateway for Email Servers version 8.5.2, consider restricting access to the currentRequest parameter to minimize the risk of exploitation until a patch is available. Avoid using the currentRequest parameter in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-37238

Affected Products

Mdaemon Technologies Securitygateway For Email Servers

References · 6

• 🔥 https://gtn.com.np/wp-content/uploads/2022/07/Authenticated-Reflected-Cross-Site-Scripting-XSS-at-currentRequest-Parameter.pdf · Exploit
• https://files.mdaemon.com/securitygateway/release/relnotes_en.htm · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-37238 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37238 · Security Note
• https://t.me/cvenotify/35159 · Telegram Post
• https://t.me/cibsecurity/48784 · Telegram Post