Unscored CVE-2020-29133 EUVD-2020-21514GHSA-j56c-jw7v-92vw

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile…

Published Nov 27, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

jsp/upload.jsp in Coremail XT 5.0 allows XSS via an uploaded personal signature, as demonstrated by a .jpg.html filename in the signImgFile parameter.

References

https://github.com/fa1c0n1/fa1c0n-vim/blob/master/temp/core_tmp.md