medium5.4
CVE-2022-37238
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
Impact
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Altn | Security Gateway For Email Servers | Version 8.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
- https://gtn.com.np/wp-content/uploads/2022/07/Authenticated-Reflected-Cross-Site-Scripting-XSS-at-currentRequest-Parameter.pdf
- https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
- https://gtn.com.np/wp-content/uploads/2022/07/Authenticated-Reflected-Cross-Site-Scripting-XSS-at-currentRequest-Parameter.pdf