CVE-2022-37241

Description

References

• files.mdaemon.com/securitygateway/release/relnotes_en.htm · Release Notes
• gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS-at-data_leak_list_ajax-endpoint.pdf · Exploit

Más vulnerabilidades de security gateway for email servers

• CVE-2022-37238MEDIO 5.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
• CVE-2022-37245MEDIO 5.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.
• CVE-2022-37244MEDIO 5.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login …
• CVE-2022-37243MEDIO 5.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
• CVE-2022-37242CRÍTICO 9.8MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.