Lucene search
+L

1 matches found

OSV
OSV
added 2021/01/08 3:34 p.m.10 views

MGASA-2021-0010 Updated squirrelmail packages fix security vulnerabilities

XSS was discovered in SquirrelMail through 1.4.22. Due to improper handling of RCDATA and RAWTEXT type elements, the built-in sanitization mechanism can be bypassed. Malicious script content from HTML e-mail can be executed within the application context via crafted use of for example a NOEMBED,...

6.1CVSS5.9AI score0.01819EPSS
SaveExploits2References4
Rows per page
Query Builder