← Database

CVE-2023-24839

MEDIUM CVSS: 6.1 Published: 2023-03-27 Modified: 2026-06-17

Description

HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.

Affected Platforms

Hgiga Oaklouds Mailsherlock

Weakness Type

CWE-79

References