Rumble Mail Server Project Rumble Mail Server
4 CVEs affecting Rumble Mail Server Project Rumble Mail Server. Latest disclosed: 2022-04-04. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43456 | High | 7.8 | 2022-04-04 | An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the RumbleService executable service path. |
CVE-2021-43462 | Medium | 5.4 | 2022-04-04 | A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter. |
CVE-2021-43461 | Medium | 5.4 | 2022-04-04 | Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter. |
CVE-2021-43459 | Medium | 5.4 | 2022-04-04 | A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) path parameters. |