High · 8.8 CVE-2024-34058 EUVD-2024-34612GHSA-rrq5-86rg-xjm7

The WebTop package for NethServer 7 and 8 allows stored XSS (for example, via the Subject field if an e-mail message).

Published May 17, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

The WebTop package for NethServer 7 and 8 allows stored XSS (for example, via the Subject field if an e-mail message).

References

https://www.openwall.com/lists/oss-security/2024/05/16/3
[oss-security] 20240516 CVE-2024-34058: Nethserver 7 & 8 stored cross-site scripting (XSS) in WebTop package mailing-list
20240520 CVE-2024-34058: Nethserver 7 & 8 stored cross-site scripting (XSS) in WebTop package mailing-list