CVE-2023-29712

CVE-2023-29712, CVE-2023-29713, CVE-2023-29714 describe Cross Site Scripting vulns in Vade Secure Gateway. CVE-2023-29712: XSS via crafted payload to the X-Rewrite-URL parameter. CVE-2023-29713: XSS via a GET request after the /css/ directory. CVE-2023-29714: XSS via the username, password, and l...

Vade Secure Gateway 跨站脚本漏洞

Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway. An attacker could execute arbitrary code by exploiting the vulnerability...

CVE-2023-29713

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the GET request after the /css/ directory...

Vade Secure Gateway 跨站脚本漏洞

Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway that stems from a cross-site scripting vulnerability in the X-Rewrite-URL parameter...

Vade Secure Gateway 跨站脚本漏洞

Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway. An attacker can exploit the vulnerability to execute arbitrary code via the username, password and language cookie parameters...

CVE-2023-29712

Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the X-Rewrite-URL parameter...

CVE-2023-29714

CVE-2023-29714 is a Cross Site Scripting vulnerability in Vade Secure Gateway . The issue allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter. The provided sources describe the vulnerability consistently across multiple databases (includin...

CVE-2023-29713

CVE-2023-29713 affects Vade Secure Gateway. The vulnerability is a Cross Site Scripting (XSS) issue in the handling of GET requests after the /css/ directory, enabling a remote attacker to execute arbitrary code via a crafted payload. The available sources indicate a reflected-type XSS in this pr...