Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-8512. PoCs published by Lutfu Mert Ceylan. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a reflective XSS vulnerability in IceWarp WebMail 11.4.4.1 and earlier versions via the 'color' parameter. The PoC shows how an attacker can inject malicious JavaScript code into the URL, which executes when a user visits the crafted link.
Description
In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.
Exploits (1)
This exploit demonstrates a reflective XSS vulnerability in IceWarp WebMail 11.4.4.1 and earlier versions via the 'color' parameter. The PoC shows how an attacker can inject malicious JavaScript code into the URL, which executes when a user visits the crafted link.
Nuclei Templates (1)
title:"icewarp" || http.title:"icewarp"
title="icewarp"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N