VulnerabilityModified
CVE-2012-3536
Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project.
MEDIUM 6.1EPSS 1.92%
Does this matter?
Lower severity and a low EPSS score (1.92%). Track it; it rarely justifies an emergency change on its own.
Description
Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project. An attacker could send a carefully crafted email to a user of Hupa which would trigger a XSS when the email was opened or when a list of messages were viewed. This issue was addressed in Hupa 0.0.3.
- CVSS 3.0
- 6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- EPSS
- 1.92% probability · 79th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- apache/hupa
- Source
- security@apache.org
References
- http://svn.apache.org/viewvc?view=revision&revision=1373762Issue Tracking, Vendor Advisory
- https://james.apache.org/hupa/index.htmlVendor Advisory
- http://svn.apache.org/viewvc?view=revision&revision=1373762Issue Tracking, Vendor Advisory
- https://james.apache.org/hupa/index.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.