CVE-2023-52269

MEDIUM 4.8CVE-2023-52269 · Published 31/12/2023 · updated 17/06/2026

In short

CVE-2023-52269 is a MEDIUM (CVSS 4.8) vulnerability affecting securitygateway (mdaemon).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
securitygateway mdaemon	`≤ 9.0.3`	No fix yet

Description

MDaemon SecurityGateway through 9.0.3 allows XSS via a crafted Message Content Filtering rule. This might allow domain administrators to conduct attacks against global administrators.

References

vipercalling/XSSsecurityGateway · Exploit
mdaemon.com/pages/security-gateway · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free