CVE-2022-37241

Mô tả

Tham khảo

• files.mdaemon.com/securitygateway/release/relnotes_en.htm · Release Notes
• gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS-at-data_leak_list_ajax-endpoint.pdf · Exploit

Lỗ hổng khác của security gateway for email servers

• CVE-2022-37238TRUNG BÌNH 5.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
• CVE-2022-37245TRUNG BÌNH 5.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.
• CVE-2022-37244TRUNG BÌNH 5.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login …
• CVE-2022-37243TRUNG BÌNH 5.4MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
• CVE-2022-37242NGHIÊM TRỌNG 9.8MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.