CVE-2024-55218

MEDIUMNuclei

IceWarp Server 10.2.1 - Cross-Site Scripting

Title source: github.com
STIX 2.1 vulnerability

Record summary

CVE-2024-55218 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 8, 2025 · Source: CVE List

Nuclei templates

1
ProjectDiscoveryMEDIUMIceWarp Server 10.2.1 - Cross-Site ScriptingCVSS 6.1

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter.

Impact

Attackers can inject malicious JavaScript through the meta parameter, executing arbitrary code in victim browsers when they visit crafted URLs.

Remediation

Update IceWarp Server to a version later than 10.2.1 that addresses the reflected XSS vulnerability.

WeaknessesCWE-79
Authorss4e-io
Template tagscvecve2024icewarpxssvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shodan: http.title:"icewarp server administration"
Shodan: http.title:"icewarp"
Shodan: cpe:"cpe:2.3:a:icewarp:mail_server"
FOFA: title="icewarp server administration"
FOFA: title="icewarp"
Google: intitle:"icewarp server administration"
Google: intitle:"icewarp"
Google: powered by icewarp 10.2.1
Google: powered by icewarp 10.4.4
https://resources.s4e.io/blog/icewarp-server-10-2-1-reflected-xss-vulnerability-cve-2024-55218/ https://nvd.nist.gov/vuln/detail/CVE-2024-55218

Source: ProjectDiscovery

References

3