Listen to this Post
MailEnable versions before 10.54 contain a reflected XSS vulnerability.
The vulnerability is in the FieldBcc parameter.
This parameter is part of the AddressBook.aspx page.
The page is located at /Mondo/lang/sys/Forms/AddressBook.aspx.
The FieldBcc value is processed via GET requests.
The input is not properly sanitized before reflection.
It is reflected inside a
'; alert('XSS'); //
';
How Exploit:
Craft URL with FieldBcc payload.
Send link to authenticated user.
User clicks link during email composition.
Script executes in user’s browser.
Steal cookies or session data.
Redirect to malicious site.
Protection from this CVE
Update to version 10.54.
Sanitize FieldBcc input.
Implement content security policy.
Use HTTP-only cookies.
Impact:
Redirect victims maliciously.
Steal non-HttpOnly cookies.
Inject arbitrary HTML/CSS.
Perform actions as user.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
