CVE-2022-50908
Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
概要
Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web shodan.io