medium6.1
CVE-2019-19129
Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.
Impact
Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Afterlogic | Aurora | Version 8.3.11 |
| Afterlogic | Webmail Pro | Version 8.3.11 |
Weakness classification
References
- NVD record
- CVE.org record
- https://afterlogic.com
- https://auroramail.wordpress.com/2019/11/25/vulnerability-closed-in-webmail-and-aurora-remote-stored-xss-in-attachments-name/
- https://afterlogic.com
- https://auroramail.wordpress.com/2019/11/25/vulnerability-closed-in-webmail-and-aurora-remote-stored-xss-in-attachments-name/