CVE-2019-8983
published 2019-02-21CVE-2019-8983: MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).
PriorityP424medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EPSS
0.79%
51.7th percentile
MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| altn | mdaemon | >= 14.0 < 18.5.2 | 18.5.2 |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET EXPLOIT Apache Solr RCE via Velocity Template M2 (CVE-2019-17558)
suricata·2021-10-27·CVSS 7.5
CVE-2019-17558 [HIGH] ET EXPLOIT Apache Solr RCE via Velocity Template M2 (CVE-2019-17558)
ET EXPLOIT Apache Solr RCE via Velocity Template M2 (CVE-2019-17558)
Rule: alert http any any -> [$HOME_NET,$HTTP_SERVERS] 8983 (msg:"ET EXPLOIT Apache Solr RCE via Velocity Template M2 (CVE-2019-17558)"; flow:established,to_server; http.method; bsize:3; content:"GET"; http.uri; content:"/select"; nocase; endswith; content:"wt=velocity"; nocase; distance:0; content:"v.template=custom"; nocase; content:"v.template.custom="; nocase; fast_pattern; reference:url,www.exploit-db.com/exploits/48338; reference:cve,2019-17558; classtype:attempted-admin; sid:2034259; rev:2; metadata:attack_target Server, created_at 2021_10_27, cve CVE_2019_17558, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Exploit, tag CISA_KEV, updated_at 2024_03_26, mitre_tactic_id TA
Suricata
ET EXPLOIT Apache Solr RCE via Velocity Template M1 (CVE-2019-17558)
suricata·2021-10-27·CVSS 7.5
CVE-2019-17558 [HIGH] ET EXPLOIT Apache Solr RCE via Velocity Template M1 (CVE-2019-17558)
ET EXPLOIT Apache Solr RCE via Velocity Template M1 (CVE-2019-17558)
Rule: alert http any any -> [$HOME_NET,$HTTP_SERVERS] 8983 (msg:"ET EXPLOIT Apache Solr RCE via Velocity Template M1 (CVE-2019-17558)"; flow:established,to_server; http.method; bsize:4; content:"POST"; http.uri; content:"/solr/test/config"; nocase; endswith; http.request_body; content:"solr.VelocityResponseWriter"; nocase; fast_pattern; content:"params.resource.loader.enabled"; nocase; pcre:"/[^\r\n]*true/Ri"; reference:url,www.exploit-db.com/exploits/48338; reference:cve,2019-17558; classtype:attempted-admin; sid:2034258; rev:2; metadata:attack_target Server, created_at 2021_10_27, cve CVE_2019_17558, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag Exploit, tag CISA_KEV, updated
No writeups or analysis indexed.
2019-02-21
Published