Lucene search
HistoryOct 20, 2023 - 10:15 p.m.
CVE-2023-38191
cve-2023-38191
superwebmailer
xss
security
vulnerability
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename.
Affected configurations
Node
superwebmailersuperwebmailerMatch9.00.0.01710
| CPE | Name | Operator | Version |
|---|---|---|---|
| superwebmailer:superwebmailer | superwebmailer | eq | 9.00.0.01710 |
Related
nvd
nvd
CVE-2023-38191
2023-10-20 22:15:10
prion
prion
Design/Logic Flaw
2023-10-20 22:15:00
cvelist
cvelist
CVE-2023-38191
2023-10-20 00:00:00
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.0005 Low
EPSS
Percentile
17.0%
Related for CVE-2023-38191