medium6.1
CVE-2018-14954
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
Impact
The mail message display page in SquirrelMail through 1.4.22 has XSS via the formaction attribute.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Squirrelmail | Squirrelmail | through 1.4.22 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2018/07/26/2
- https://bugs.debian.org/905023
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5FP5O562A4FM5TCFNEW73SS6PZONSAC/
- https://sourceforge.net/p/squirrelmail/bugs/2831/
- http://www.openwall.com/lists/oss-security/2018/07/26/2
- https://bugs.debian.org/905023
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVXTYMZ35IC5KPNMAE6BWAQWURMX7KZO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5FP5O562A4FM5TCFNEW73SS6PZONSAC/
- https://sourceforge.net/p/squirrelmail/bugs/2831/