Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2017-11617] atmail 7 Stored XSS Vulnerability

bishopfox.com | advisory | CVE-2017-11617 | #xss | #advisory | #webmail | #atmail | #cve-2017-11617

Summary

Official advisory for a stored XSS flaw in atmail 7's webmail component (CVE-2017-11617): a crafted email lets an attacker steal contacts, send mail and expose inboxes; fixed in 7.8.0.2.
Published
Collected

original ↗

Related coverage

back