Description (CNA)
An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/
- https://github.com/chudyPB/MDaemon-Advisories
ADP enrichment
No English description supplied.