CVE-2020-18723: XSS
Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-18723?
CVE-2020-18723 is a vulnerability that allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.
What is the severity of CVE-2020-18723?
The severity of CVE-2020-18723 is medium with a CVSS score of 5.4.
How does CVE-2020-18723 affect MDaemon webmail?
CVE-2020-18723 affects MDaemon webmail versions up to but excluding 20.0.1.
How can an attacker exploit CVE-2020-18723?
An attacker can exploit CVE-2020-18723 by injecting malicious code into the file attachment field in MDaemon webmail and executing it on the email recipient side when forwarding an email.
Is there a fix for CVE-2020-18723?
Yes, the fix for CVE-2020-18723 is to update MDaemon webmail to version 20.0.1 or newer.