An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2022-06-07T00:00:00

Updated: 2024-08-03T07:19:05.806Z

Reserved: 2022-05-23T00:00:00

Link: CVE-2022-31470

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-06-07T21:15:15.077

Modified: 2024-11-21T07:04:31.110

Link: CVE-2022-31470

cve-icon Redhat

No data.