1. Home
  2. Security Advisories
  3. FreeBSD
  4. FREEBSD:3E917407-4B3F-11EF-8E49-001999F8D30B

[FREEBSD:3E917407-4B3F-11EF-8E49-001999F8D30B] Mailpit -- Content Security Policy XSS

Affected Packages 1
Info Packages References

Mailpit developer reports:

  A vulnerability was discovered which allowed a bad
  actor with SMTP access to Mailpit to bypass the Content
  Security Policy headers using a series of crafted HTML
  messages which could result in a stored XSS attack via
  the web UI.
Package Affected Version
pkg:freebsd/mailpit < 1.19.3
ID
FREEBSD:3E917407-4B3F-11EF-8E49-001999F8D30B
URL
http://vuxml.freebsd.org/freebsd/3e917407-4b3f-11ef-8e49-001999f8d30b.html
Published
2024-07-26T00:00:00
(6 weeks ago)
Modified
2024-07-26T00:00:00
(6 weeks ago)
Rights
FreeBSD VuXML Security Team
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:freebsd/mailpit mailpit < 1.19.3