CVE-2023-28705
Openfind Mail2000 - XSS (Reflected Cross-site scripting)
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.
| CWE | CWE-79 |
| Vendor | openfind |
| Product | mail2000 |
| Published | Jun 2, 2023 |
| Last Updated | Jan 8, 2025 |
Stay Ahead of the Next One
Get instant alerts for openfind mail2000
Be the first to know when new medium vulnerabilities affecting openfind mail2000 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None
Affected Versions
Openfind / Mail2000
unspecified ≤ 7