CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-11-15
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability via HTML Email Image Tags (CVE-2024-11182)
[Affected Scope] MDaemon Email Server versions prior to 24.5.1c with Webmail enabled
[Impact] Remote attackers can execute arbitrary JavaScript code in the context of a victim's browser session by sending a specially crafted HTML email, potentially leading to session hijacking and credential theft
[Mitigation] Immediately upgrade MDaemon Email Server to version 24.5.1c or later to resolve the sanitization flaw