CVE-2023-49077: mailcow-dockerized XSS Vulnerability in Quarantine UI Allows Unauthorized Access and Data Manipulation
Mailcow: dockerized is an open source groupware/email suite based on docker. A Cross-Site Scripting (XSS) vulnerability has been identified within the Quarantine UI of the system. This vulnerability poses a significant threat to administrators who utilize the Quarantine feature. An attacker can send a carefully crafted email containing malicious JavaScript code. This issue has been patched in version 2023-11.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-49077?
CVE-2023-49077 is a Cross-Site Scripting (XSS) vulnerability in the Quarantine UI of Mailcow: dockerized.
What is the severity of CVE-2023-49077?
CVE-2023-49077 has a severity rating of 8.3 (High).
How does CVE-2023-49077 affect me?
CVE-2023-49077 poses a significant threat to administrators who utilize the Quarantine feature in Mailcow: dockerized, as it allows unauthorized access and data manipulation.
How do I fix CVE-2023-49077?
To fix CVE-2023-49077, it is recommended to update to the latest version of Mailcow: dockerized mentioned in the advisory or release notes.
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-49077?
The Common Weakness Enumeration (CWE) ID for CVE-2023-49077 is CWE-79 (Cross-Site Scripting).