返回 CVE 浏览器

CVE-2022-37238

MEDIUM

5.4

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2022-08-25

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.

Affected Platforms (CPE)

📦

Altn

Security Gateway For Email Servers

= 8.5.2

References & Advisories

🔗 https://files.mdaemon.com/securitygateway/release/relnotes_en.htm

🔗 https://gtn.com.np/wp-content/uploads/2022/07/Authenticated-Reflected-Cross-Site-Scripting-XSS-at-currentRequest-Parameter.pdf

🔗 https://files.mdaemon.com/securitygateway/release/relnotes_en.htm

🔗 https://gtn.com.np/wp-content/uploads/2022/07/Authenticated-Reflected-Cross-Site-Scripting-XSS-at-currentRequest-Parameter.pdf

相关漏洞威胁

The Clover Payment Gateway by Zaytech for WooCommerce WordPress plugin before 1.3.6 does not verify that an approved external paym...

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL be...

CVE-2026-174582.1

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser...

CVE-2026-174342.1

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-...