Mailcow < 2026-03b - Href Link Injection
mailcow < 2026-03b reflects raw REQUEST_URI into JavaScript and href links on the login page, allowing attackers to inject parameters that break JS logic and enable phishing.
MailcowPoC 已收录
CVSS—
Mailcow是一个开源的电子邮件和协作套件，提供所有必要的工具来运行自己的电子邮件服务器，包括电子邮件、日历、联系人、任务和文件共享。
共找到 1 条公开漏洞记录
mailcow < 2026-03b reflects raw REQUEST_URI into JavaScript and href links on the login page, allowing attackers to inject parameters that break JS logic and enable phishing.