CVE-2023-39600 PoC — IceWarp 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39600.yaml

Associated Vulnerability

Title:IceWarp 跨站脚本漏洞 (CVE-2023-39600)
Description:IceWarp是捷克爱思华宝（IceWarp）公司的一种集成式的企业通信和协作平台，旨在为组织提供各种工具和功能，以支持内部和外部沟通、协作和业务流程。 IceWarp 11.4.6.0 版本存在安全漏洞，该漏洞源于 color 参数存在跨站脚本漏洞。

Description

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.

File Snapshot


 id: CVE-2023-39600

info:
  name: IceWarp 11.4.6.0 - Cross-Site Scripting
  author: Imjust0
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!