CVE-2020-26554

概要

参考情報

• packetstormsecurity.com/files/160077/MailDepot-2033-2.3.3022-Cross-Site-Scripting.html · Exploit
• syss.de/pentest-blog/syss-2020-037-persistent-cross-site-scripting-schwachstelle-in-reddoxx-maildepot · Third Party Advisory

maildepot のその他の脆弱性

• CVE-2019-19200高 8.8REDDOXX MailDepot 2032 2.2.1242 allows authenticated users to access the mailboxes of other users.
• CVE-2019-19199高 7.4REDDOXX MailDepot 2032 SP2 2.2.1242 has Insufficient Session Expiration because tokens are not invalidated upon a logout.