CVE-2017-17752 in Ability Mail Server

Resumen (Inglés)

Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2017-12-19

Divulgación

2017-12-20

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
110930	Ability Mail Server _readmail secuencias de comandos en sitios cruzados	79	Prueba de concepto	No está definido	CVE-2017-17752

Fuentes

• MITRE
• NVD
• CVE Details