CVE-2023-49077

Summary

CVE-2023-49077: A new vulnerability affects Mailcow's dockerized version, an open-source groupware/email suite. This issue involves a Cross-Site Scripting (XSS) flaw in the Quarantine UI, posing a threat to administrators utilizing the Quarantine feature. Malicious JavaScript code can be embedded in emails, allowing attackers to execute unwanted code in users' web browsers. The vulnerability has been addressed in version 2023-11, and users are advised to update as soon as possible to mitigate risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.