CVE-2022-37239

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2022-08-25

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Security Gateway For Email Servers (Altn)

References

• https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
• https://gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS.pdf