CVEブラウザに戻る

CVE-2023-52269

MEDIUM

4.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-12-31

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

MDaemon SecurityGateway through 9.0.3 allows XSS via a crafted Message Content Filtering rule. This might allow domain administrators to conduct attacks against global administrators.

Affected Platforms (CPE)

📦

Mdaemon

Securitygateway

<= 9.0.3

References & Advisories

🔗 https://github.com/vipercalling/XSSsecurityGateway/blob/main/finding

🔗 https://mdaemon.com/pages/security-gateway

🔗 https://github.com/vipercalling/XSSsecurityGateway/blob/main/finding

🔗 https://mdaemon.com/pages/security-gateway

関連する脆弱性情報

CVE-2022-372385.4

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest pa...

CVE-2022-372455.4

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoin...

CVE-2022-372445.4

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. af...

CVE-2022-372435.4

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoin...