Lucene search

K
osvGoogleOSV:CVE-2017-11737
HistoryJul 29, 2017 - 2:29 p.m.

CVE-2017-11737

2017-07-2914:29:00
Google
osv.dev

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

33.8%

interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the history page.

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

33.8%