.. / CVE-2023-39600

Exploit for IceWarp 11.4.6.0 - Cross-Site Scripting (CVE-2023-39600)

Description:

IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.

Nuclei Template

View the template here CVE-2023-39600.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-39600.yaml
Copy

References:

https://medium.com/@katikitala.sushmitha078/cross-site-scripting-reflected-xss-in-icewarp-server-cve-2023-39600-310a7e1c8817
https://medium.com/%40katikitala.sushmitha078/cross-site-scripting-reflected-xss-in-icewarp-server-cve-2023-39600-310a7e1c8817
https://icewarp.com
https://nvd.nist.gov/vuln/detail/CVE-2023-39600