CVE-2023-29712

CVE-2023-29712, CVE-2023-29713, CVE-2023-29714 describe Cross Site Scripting vulns in Vade Secure Gateway. CVE-2023-29712: XSS via crafted payload to the X-Rewrite-URL parameter. CVE-2023-29713: XSS via a GET request after the /css/ directory. CVE-2023-29714: XSS via the username, password, and l...

CVE-2023-29712

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the X-Rewrite-URL parameter...

Vade Secure Gateway 跨站脚本漏洞

Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway. An attacker can exploit the vulnerability to execute arbitrary code via the username, password and language cookie parameters...

Vade Secure Gateway 跨站脚本漏洞

Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway. An attacker could execute arbitrary code by exploiting the vulnerability...

CVE-2023-29713

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the GET request after the /css/ directory...

Vade Secure Gateway 跨站脚本漏洞

Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway that stems from a cross-site scripting vulnerability in the X-Rewrite-URL parameter...

CVE-2023-29714

CVE-2023-29714 is a Cross Site Scripting vulnerability in Vade Secure Gateway . The issue allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter. The provided sources describe the vulnerability consistently across multiple databases (includin...

CVE-2023-29713

CVE-2023-29713 affects Vade Secure Gateway. The vulnerability is a Cross Site Scripting (XSS) issue in the handling of GET requests after the /css/ directory, enabling a remote attacker to execute arbitrary code via a crafted payload. The available sources indicate a reflected-type XSS in this pr...