Unscored CVE-2019-0218 EUVD-2019-1005GHSA-mmx7-fwfq-4hpr

A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.

Published Apr 22, 2019 · Updated Aug 4, 2024 · Assigned by apache

Vendor: The Apache Software Foundation Product: Apache Pony Mail (incubating)

Description

A vulnerability was discovered wherein a specially crafted URL could enable reflected XSS via JavaScript in the pony mail interface.

Affected products

Vendor	Product	Affected	Fixed
The Apache Software Foundation	Apache Pony Mail (incubating)	0.8 to 0.10	—

References

[ponymail-users] 20190420 [CVE-2019-0218] Apache Pony Mail (incubating) Reflected XSS mailing-list
[oss-security] 20190420 [CVE-2019-0218] Apache Pony Mail (incubating) Reflected XSS mailing-list
108046 vdb-entry