Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors.
CVSS 2.0
Severity: HIGH
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ilohamail | ilohamail | 0.8.13 |
| ilohamail | ilohamail | 0.7.4 |
| ilohamail | ilohamail | 0.8.11 |
| ilohamail | ilohamail | 0.7.2 |
| ilohamail | ilohamail | 0.7.1 |
| ilohamail | ilohamail | 0.8.9 |
| ilohamail | ilohamail | 0.8.12 |
| ilohamail | ilohamail | 0.7.3 |
| ilohamail | ilohamail | 0.7.7 |
| ilohamail | ilohamail | 0.8.10 |
| ilohamail | ilohamail | 0.7.0 |
| ilohamail | ilohamail | 0.7.9 |
| ilohamail | ilohamail | 0.7.6 |
| ilohamail | ilohamail | 0.7.5 |
| ilohamail | ilohamail | 0.7.8 |
| ilohamail | ilohamail | 0.7.4.2 |
| ilohamail | ilohamail | 0.8.6 |
| ilohamail | ilohamail | 0.8.8 |
| ilohamail | ilohamail | 0.8.7 |
Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the e-mail (1) body, (2) filename, or (3) MIME type.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ilohamail | ilohamail | 0.8.13 |
| ilohamail | ilohamail | 0.7.4 |
| ilohamail | ilohamail | 0.8.11 |
| ilohamail | ilohamail | 0.7.2 |
| ilohamail | ilohamail | 0.7.1 |
| ilohamail | ilohamail | 0.8.9 |
| ilohamail | ilohamail | 0.8.12 |
| ilohamail | ilohamail | 0.7.3 |
| ilohamail | ilohamail | 0.7.7 |
| ilohamail | ilohamail | 0.8.10 |
| ilohamail | ilohamail | 0.7.0 |
| ilohamail | ilohamail | 0.7.9 |
| ilohamail | ilohamail | 0.8.14_rc2 |
| ilohamail | ilohamail | 0.8.14_rc1 |
| ilohamail | ilohamail | 0.7.6 |
| ilohamail | ilohamail | 0.7.5 |
| ilohamail | ilohamail | 0.7.8 |
| ilohamail | ilohamail | 0.7.4.2 |
| ilohamail | ilohamail | 0.8.6 |
| ilohamail | ilohamail | 0.8.8 |
| ilohamail | ilohamail | 0.8.7 |