CVE-2022-50908
Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
Résumé
Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web shodan.io