CVE-2023-39600

MEDIUM NUCLEI

Icewarp - XSS

Title source: rule

Description

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.

Nuclei Templates (1)

IceWarp 11.4.6.0 - Cross-Site Scripting
MEDIUMby Imjust0
Shodan: title:"icewarp" || http.favicon.hash:2144485375 || http.title:"icewarp"
FOFA: title="icewarp" || icon_hash=2144485375

References (2)

Scores

CVSS v3 6.1
EPSS 0.0431
EPSS Percentile 88.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
icewarp/icewarp 11.4.6.0
Published Aug 25, 2023
Tracked Since Feb 18, 2026