Beveiligingsadvies

CVE-2024-5406

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-27 11:50:55
Laatst bijgewerkt 2024-08-01 21:11:12
Toegewezen door INCIBE
CVSS-score 6.3
Status PUBLISHED

Beschrijving

A vulnerability had been discovered in WinNMP 19.02 consisting of an XSS attack via index page in from, subject, text and hash parameters. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their session details.