An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before and 10.3.x before allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.

Source: CVE-2022-31470

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 항목은 *(으)로 표시합니다

Time limit is exhausted. Please reload the CAPTCHA.