medium5.4
CVE-2022-37244
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter.
Impact
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Altn | Security Gateway For Email Servers | Version 8.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
- https://gtn.com.np/wp-content/uploads/2022/07/IFRAME-Injection-at-currentRequest-Parameter.pdf
- https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
- https://gtn.com.np/wp-content/uploads/2022/07/IFRAME-Injection-at-currentRequest-Parameter.pdf