CVE-2016-4460

概要

参考情報

• markmail.org/message/jy7o23cppny26icu · Mailing List
• securityfocus.com/bid/100449 · Third Party Advisory

pony mail のその他の脆弱性

• CVE-2019-0218中 6.1A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.
• CVE-2017-5658中 5.3The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This c…