Unscored CVE-2015-0915 EUVD-2015-0923GHSA-cr4v-rcwf-qpv3

Cross-site scripting (XSS) vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbitrary web script or H…

Published May 22, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in RAKUS MailDealer 11.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted attachment filename.

References

JVNDB-2015-000063 third-party-advisory
JVN#20133698 third-party-advisory
http://support.maildealer.jp/announce/150511.php