Design/Logic Flaw

2022-08-2515:15:00

PRIOn knowledge base

www.prio-n.com

mdaemon technologies

securitygateway

iframe injection

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection.

CPENameOperatorVersion
security_gateway_for_email_serverseq8.5.2

CPE	Name	Operator	Version
	security_gateway_for_email_servers	eq	8.5.2

References

files.mdaemon.com/securitygateway/release/relnotes_en.htm

gtn.com.np/wp-content/uploads/2022/07/IFRAME-Injection-at-currentRequest-Parameter.pdf