Description
Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.
Published: 2023-06-02
Score: 5.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Update Openfind Mail2000 version to V8

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-32348 Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.
History

Wed, 08 Jan 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Openfind Mail2000
cve-icon MITRE

Status: PUBLISHED

Assigner: twcert

Published:

Updated: 2025-01-08T20:02:33.928Z

Reserved: 2023-03-21T00:00:00.000Z

Link: CVE-2023-28705

cve-icon Vulnrichment

Updated: 2024-08-02T13:43:23.778Z

cve-icon NVD

Status : Modified

Published: 2023-06-02T11:15:10.720

Modified: 2024-11-21T07:55:50.380

Link: CVE-2023-28705

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses