Codecrafters Ability Mail Server
2 CVEs affecting Codecrafters Ability Mail Server. Latest disclosed: 2019-03-12. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9557 | Medium | 6.1 | 2019-03-12 | Ability Mail Server 4.2.6 has Persistent Cross Site Scripting (XSS) via the body e-mail body. To exploit the vulnerability, the victim must open an email with… |
CVE-2017-17752 | Medium | 6.1 | 2017-12-20 | Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_re… |