Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-24839
HistoryMar 27, 2023 - 4:15 a.m.

Cross site scripting

2023-03-2704:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site scripting
mailsherlock
javascript injection
reflected xss attack
remote attacker
unauthenticated
nvd

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.

CPENameOperatorVersion
oaklouds_mailsherlockeq4.5

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

Related for PRION:CVE-2023-24839