CVE-2023-49077

MEDIUM 6.1CVE-2023-49077 · Published 30/11/2023 · updated 17/06/2026

In short

CVE-2023-49077 is a MEDIUM (CVSS 6.1) vulnerability affecting mailcow (mailcow).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.6% of all vulnerabilities.
Fix: update to 2023-11 or later.

Package	Affected versions	Patched versions
mailcow mailcow	`< 2023-11`	`2023-11`

Description

Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting (XSS) vulnerability has been identified within the Quarantine UI of the system. This vulnerability poses a significant threat to administrators who utilize the Quarantine feature. An attacker can send a carefully crafted email containing malicious JavaScript code. This issue has been patched in version 2023-11.

References

mailcow/mailcow-dockerized release 2023-11 · Release Notes
mailcow/mailcow-dockerized security advisory · Vendor Advisory

More vulnerabilities in mailcow

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mailcow

< 2023-11

2023-11

Description

More vulnerabilities in mailcow

See all →