medium6.1Public exploit code
CVE-2017-17752
Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ability Mail Server 3.3.2 - Cross-Site Scripting2017-12-20 · webapps · multiple
Impact
Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codecrafters | Ability Mail Server | Version 3.3.2 |