Description
Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. Attackers controlling or intercepting a sending profile's SMTP server can execute script when administrators view campaign results or send test emails, stealing API keys.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| gophish | gophish | ≤ 0.12.1 | — |
References
- Researcher Disclosure technical-description exploit
- https://github.com/gophish/gophish/blob/b1648f0759c6d57ac989157c55d8b47c40254fe6/static/js/src/app/campaign_results.js#L422-L427 technical-description
- https://github.com/gophish/gophish/blob/b1648f0759c6d57ac989157c55d8b47c40254fe6/static/js/src/app/campaigns.js#L110-L113 technical-description
- https://github.com/gophish/gophish product
- VulnCheck Advisory: Gophish through 0.12.1 XSS via Unescaped SMTP Server Error Messages third-party-advisory