CVE-2020-35741: HGiga MailSherlock - XSS -2

Q: What is the severity of CVE-2020-35741?

CVE-2020-35741 is classified as a high severity vulnerability due to the potential for cross-site scripting (XSS) attacks.

Q: How do I fix CVE-2020-35741?

To fix CVE-2020-35741, ensure that input validation is implemented on all user input parameters within the affected software.

Q: What are the affected software versions for CVE-2020-35741?

CVE-2020-35741 affects Hgiga Msr45 Isherlock-antispam versions up to 4.5-133 and Msr45 Isherlock-user versions up to 4.5-120, as well as Ssr45 equivalents.

Q: Can CVE-2020-35741 be exploited remotely?

Yes, CVE-2020-35741 can be exploited remotely if an attacker can access the affected login pages.

Q: What types of attacks can be performed using CVE-2020-35741?

CVE-2020-35741 allows attackers to perform cross-site scripting (XSS) attacks by injecting malicious JavaScript.

Published Dec 31, 2020

Updated

HGiga MailSherlock does not validate user parameters on multiple login pages. Attackers can use the vulnerability to inject JavaScript syntax for XSS attacks.

Affected Software

4 affected components

Hgiga Msr45 Isherlock-antispam<4.5-133

Hgiga Msr45 Isherlock-user<4.5-120

Hgiga Ssr45 Isherlock-antispam<4.5-133

Hgiga Ssr45 Isherlock-user<4.5-120

Remediation

Information

Update MailSherlock MSR45/SSR45 Module to: iSherlock-user-4.5-120.i386.rpm iSherlock-antispam-4.5-133.i386.rpm

Event History

Dec 31, 2020

CVE Published

via MITRE·07:45 AM

Data Sourced

via MITRE·07:45 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-35741?

CVE-2020-35741 is classified as a high severity vulnerability due to the potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2020-35741?