CVE-2023-39600
MEDIUM NUCLEIIceWarp 11.4.6.0 - Cross-Site Scripting via Color Parameter
Title source: llmExploitation Summary
CVE-2023-39600 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.
Nuclei Templates (1)
IceWarp 11.4.6.0 - Cross-Site Scripting
MEDIUMby Imjust0
Shodan:
title:"icewarp" || http.favicon.hash:2144485375 || http.title:"icewarp"
FOFA:
title="icewarp" || icon_hash=2144485375
References (2)
Core 2
Core References
Various Sources
https://medium.com/%40katikitala.sushmitha078/cross-site-scripting-reflected-xss-in-icewarp-server-cve-2023-39600-310a7e1c8817
Product
https://icewarp.com
Scores
CVSS v3
6.1
EPSS
0.0117
EPSS Percentile
63.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-79
Status
published
Products (1)
icewarp/icewarp
11.4.6.0
Published
Aug 25, 2023
Tracked Since
Feb 18, 2026