CVE-2023-37728: XSS

Published Jul 20, 2023

Updated

Icewarp Icearp v10.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.

Other sources

IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter.

Affected Software

1 affected component

IceWarp IceWarp=10.2.1

Event History

Jul 20, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-37728?

CVE-2023-37728 is a cross-site scripting (XSS) vulnerability in IceWarp v10.2.1.

How severe is CVE-2023-37728?

CVE-2023-37728 has a severity rating of 6.1, which is considered medium.

How does CVE-2023-37728 affect IceWarp v10.2.1?

CVE-2023-37728 affects IceWarp v10.2.1 by allowing an attacker to execute malicious scripts on the target user's browser.

How can I fix CVE-2023-37728?

To fix CVE-2023-37728, update IceWarp to a version that has addressed the vulnerability and apply any available patches or security updates.

Where can I find more information about CVE-2023-37728?

You can find more information about CVE-2023-37728 at the following references: [Medium article](https://medium.com/@ayush.engr29/cve-2023-37728-6dfb7586311), [IceWarp website](http://icearp.com), [IceWarp official website](http://icewarp.com).