CVE-2017-17752 in Ability Mail Server
摘要 (英语)
Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
预定
2017-12-19
披露
2017-12-20
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 110930 | Ability Mail Server _readmail 跨网站脚本 | 79 | 概念验证 | 未定义 | CVE-2017-17752 |