It was discovered that Postorius did not properly escape HTML in message
subjects when rendering the Held messages pop-up. An attacker could
possibly use this issue to inject arbitrary HTML, resulting in exposure
of sensitive information.
Intelligence View
⚡ tsecurity.de Intelligence
USN-8323-1: Postorius vulnerability
It was discovered that Postorius did not properly escape HTML in message subjects when rendering the Held messages pop-up. An attacker could possibly use this issue to inject arbitrary HTML, resulting in exposure of sensitive information.
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR