medium5.4
CVE-2022-29360
The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message.
Impact
The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rainloop | Webmail | through 1.16.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://blog.sonarsource.com/rainloop-emails-at-risk-due-to-code-flaw/
- https://lists.debian.org/debian-lts-announce/2023/05/msg00027.html
- https://www.rainloop.net/changelog/
- https://blog.sonarsource.com/rainloop-emails-at-risk-due-to-code-flaw/
- https://lists.debian.org/debian-lts-announce/2023/05/msg00027.html
- https://www.rainloop.net/changelog/