---
id: 4241
title: "[CVE-2017-11617] atmail 7 Stored XSS Vulnerability"
cve: CVE-2017-11617
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/atmail-7-stored-xss-advisory"
published_at: "2017-06-23T00:00:00Z"
tags: ["xss", "advisory", "webmail", "atmail", "cve-2017-11617"]
phying_url: "https://phying.com/item/4241"
lang: en
---

# [CVE-2017-11617] atmail 7 Stored XSS Vulnerability

## Summary

Official advisory for a stored XSS flaw in atmail 7's webmail component (CVE-2017-11617): a crafted email lets an attacker steal contacts, send mail and expose inboxes; fixed in 7.8.0.2.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2017-11617
- **Published:** 2017-06-23T00:00:00Z
- **Original:** https://bishopfox.com/blog/atmail-7-stored-xss-advisory
- **Phying News:** https://phying.com/item/4241