JVN#0DC004F6

desknet's cross-site scripting vulnerability

Overview

If a user views HTML email containing a malicious script, it could be executed.

This problem allows execution of script having patterns other than those addressed in JVN#F88C2C13 (additional information to JVN#89DE2014).

Products Affected

• desknet's version 4.2J R1.9

Description

Impact

lf a login ID, password, or session information is leaked, an attacker could impersonate a user to view email, alter configuration information, etc.

Solution

Vendor Status

References

JPCERT/CC Addendum

Credit

Other Information

Update History