CVE-2022-39258

🗓️ 27 Sep 2022 15:10:10Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 379 Views

mailcow prior to 2022-09 allows spoofing of Swagger API links, fixed in 2022-09 update

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-39258	27 Sep 202222:50	–	circl
CNNVD	mailcow 输入验证错误漏洞	27 Sep 202200:00	–	cnnvd
CNVD	mailcow redirect vulnerability	29 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-39258 mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI	27 Sep 202215:10	–	cvelist
EUVD	EUVD-2022-41770	3 Oct 202520:07	–	euvd
Nuclei	Mailcow Dockerized Swagger UI - Cross-Site Scripting	30 Aug 202609:28	–	nuclei
NVD	CVE-2022-39258	27 Sep 202215:15	–	nvd
Prion	Authorization	27 Sep 202215:15	–	prion
Positive Technologies	PT-2022-24850	27 Sep 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-39258	5 Feb 202519:36	–	redhatcve

NVD

Vulners

Node

mailcow mailcow:_dockerizedRange<2022-09

[
  {
    "product": "mailcow-dockerized",
    "vendor": "mailcow",
    "versions": [
      {
        "status": "affected",
        "version": "< 2022-09"
      }
    ]
  }
]