CVE-2012-3536

Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project

published February 27, 2018

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project. An attacker could send a carefully crafted email to a user of Hupa which would trigger a XSS when the email was opened or when a list of messages were viewed. This issue was addressed in Hupa 0.0.3.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01917 · 79.6th percentile
Published
2018-02-27T19:00Z
EPSS history
Timeline
  • 27 FEB 19:00Z
    Two XSS vulnerabilities were fixed in message list and view in the Hupa Webmail application from the Apache James project
    cvelistv5