CVE-2023-48116

概要

参考情報

• co3us.gitbook.io/write-ups/stored-xss-in-calendar-component-of-smartermail-cve-2023-48116 · Exploit
• smartertools.com/smartermail/release-notes/current · Release Notes

smartermail のその他の脆弱性

• CVE-2026-7807高 8.8SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint…
• CVE-2026-40514緊急 9.1SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encr…
• CVE-2026-25067中 5.3SmarterTools SmarterMail versions prior to build 9518 contain an unauthenticated path coercion vulnerability in the background-of-the-day p…
• CVE-2026-24423緊急 9.8悪用確認済み（CISA KEV）SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API…
• CVE-2026-23760緊急 9.8悪用確認済み（CISA KEV）SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-re…