| Package | Affected versions | Patched versions |
|---|---|---|
| rspamd | ≤ 1.6.2 |
interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the history page.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free