CVE-2023-28705: Openfind Mail2000 - XSS (Reflected Cross-site scripting)
Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-28705.
What is the title of the vulnerability?
The title of the vulnerability is 'Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function'.
How does this vulnerability occur?
This vulnerability occurs due to insufficient filtering of special characters in the email content of Openfind Mail2000's content filtering function.
What is the impact of this vulnerability?
The impact of this vulnerability is that a remote attacker can exploit it using phishing emails containing malicious web pages injected with JavaScript.
Is there a fix available for this vulnerability?
No fix is currently available for this vulnerability. It is recommended to follow security best practices and exercise caution while accessing emails.