CVE-2021-27182

概要

参考情報

• chudyPB/MDaemon-Advisories · Exploit
• altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN · Release Notes

mdaemon のその他の脆弱性

• CVE-2022-29976中 5.4An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .
• CVE-2022-29975中 5.4An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .
• CVE-2021-27183高 7.2An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerabil…
• CVE-2021-27181高 8.8An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In …
• CVE-2021-27180中 6.1An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request…