Skip to content
OpenAdvisories

Product · HGiga

MailSherlock

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-24842

    HGiga MailSherlock - Broken Access Control

    HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL.

    HGiga MailSherlock
  • Medium 6.1
    CVE-2023-24839

    HGiga MailSherlock - Reflected XSS

    HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.

    HGiga MailSherlock