CVE-2023-28705
CVSS V2 None
CVSS V3 None
Description
Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain malicious web pages injected with JavaScript. When users access the system and open the email, it triggers an XSS (Reflected Cross-site scripting) attack.
Overview
- CVE ID
- CVE-2023-28705
- Assigner
- twcert
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-06-02T00:00:00
- Last Modified Date
- 2023-06-02T00:00:00
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.twcert.org.tw/tw/cp-132-7158-751a6-1.html |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-28705 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28705 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-25 10:40:45 | Added to TrackCVE |