CVE-2017-17752 in Ability Mail Server
Summary
Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
12/19/2017
Disclosure
12/20/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 110930 | Ability Mail Server _readmail cross site scripting | 79 | Proof-of-Concept | Not defined | CVE-2017-17752 |