CVE-2020-25925: XSS
Published Jul 7, 2021
·Updated
Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field.
Affected Software
1 affected component
IceWarp Webclient=10.3.5
Event History
Jul 7, 2021
CVE Published
via MITRE·01:53 PM
Data Sourced
via MITRE·01:53 PM
Description
Frequently Asked Questions
1
What is CVE-2020-25925?
CVE-2020-25925 is a vulnerability that allows remote attackers to inject arbitrary web script or HTML via the 'p4' field in the Webmail Calendar in IceWarp WebClient 10.3.5.
2
What is the severity of CVE-2020-25925?
CVE-2020-25925 has a severity rating of medium.
3
How does CVE-2020-25925 affect IceWarp WebClient?
CVE-2020-25925 affects IceWarp WebClient version 10.3.5.
4
How can remote attackers exploit CVE-2020-25925?
Remote attackers can exploit CVE-2020-25925 by injecting arbitrary web script or HTML via the 'p4' field in the Webmail Calendar.
5
Is there a fix for CVE-2020-25925?
There is currently no known fix for CVE-2020-25925. It is recommended to follow the recommendations provided by the vendor or security experts.