CVE-2023-48115: XSS
Published Dec 21, 2023
·Updated
SmarterTools SmarterMail 8495 through 8664 before 8747 allows stored DOM XSS because an XSS protection mechanism is skipped when messageHTML and messagePlainText are set in the same request.
Affected Software
1 affected component
SmarterTools SmarterMail>=16.0.8495<16.0.8747
Event History
Dec 21, 2023
CVE Published
12:00 AM
Data Sourced
12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-48115?
CVE-2023-48115 has a medium severity level due to the potential for stored DOM XSS attacks.
2
How do I fix CVE-2023-48115?
To fix CVE-2023-48115, upgrade SmarterMail to version 16.0.8747 or later.
3
Who is affected by CVE-2023-48115?
CVE-2023-48115 affects SmarterTools SmarterMail versions 8495 through 8664 prior to 8747.
4
What type of vulnerability is CVE-2023-48115?
CVE-2023-48115 is categorized as a stored DOM Cross-Site Scripting (XSS) vulnerability.
5
What can attackers do with CVE-2023-48115?
Attackers exploiting CVE-2023-48115 can execute arbitrary scripts in the context of users viewing affected messages.