Description
the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Barracuda | Barracuda Message Archiver | 5.4.2.002 – < 5.4.2.002 | 5.4.2.002 |