Description

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.

INFO

Published Date :

2024-11-15T10:43:10.960Z

Last Modified :

2025-10-21T22:55:36.394Z

Source :

ESET
AFFECTED PRODUCTS

The following products are affected by CVE-2024-11182 vulnerability.

Vendors Products
Mdaemon
  • Mdaemon
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-11182.

URL Resource
https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html cve-icon cve-icon
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-11182 cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact