{"id":"CVE-2026-102372","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-102372","generatedAt":"2026-10-28T00:59:52.552Z","title":"GestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticket descriptions and replies.","description":"GestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticket descriptions and replies. Attackers can send emails to the monitored mailbox containing script tags and event handlers that execute in technician browsers, enabling ticket data theft and unauthorized actions.","published":"2026-09-29T01:16:45.000Z","lastModified":"2026-09-30T17:32:07.000Z","status":"Deferred","sourceIdentifier":"disclosure@vulncheck.com","cvss":{"version":"4.0","score":5.3,"severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-79"],"affected":[],"epss":{"score":0.00211,"percentile":0.1123,"date":"2026-10-26","history":[{"date":"2026-09-29","score":0.00211,"percentile":0.10206}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-09-29T01:16:45.000Z","detail":{"score":"5.3","severity":"MEDIUM","publishedAt":"2026-09-29T01:16:44.593Z"},"summary":"New CVE, medium severity (CVSS 5.3)."}],"references":[{"url":"https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/","source":"disclosure@vulncheck.com"},{"url":"https://gestsup.fr/index.php?page=changelog","source":"disclosure@vulncheck.com"},{"url":"https://gestsup.fr/index.php?page=download","source":"disclosure@vulncheck.com"},{"url":"https://gestsup.fr/index.php?page=download&channel=stable&version=3.2.61&type=patch","source":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/gestsup-before-3.2.62-stored-xss-via-email-body-in-login-imap-connector","source":"disclosure@vulncheck.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-102372","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}