CVE-2022-37244

2022-08-2514:41:42

mitre

www.cve.org

mdaemon technologies

securitygateway

email servers

iframe injection

vulnerability

cve-2022-37244

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection.

References

files.mdaemon.com/securitygateway/release/relnotes_en.htm

gtn.com.np/wp-content/uploads/2022/07/IFRAME-Injection-at-currentRequest-Parameter.pdf