CVE-2021-27180 PoC — MDaemon Technologies WorldClient 跨站脚本漏洞

Source

https://github.com/chudyPB/MDaemon-Advisories

Associated Vulnerability

Title:MDaemon Technologies WorldClient 跨站脚本漏洞 (CVE-2021-27180)
Description:An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user.

Description

MDaemon Advisories - CVE-2021-27180, CVE-2021-27181, CVE-2021-27182, CVE-2021-27183

Readme

# MDaemon-Advisories
MDaemon Advisories:

- CVE-2021-27180 (Reflected XSS)

- CVE-2021-27181 (CSRF Token Fixation)

- CVE-2021-27182 (Iframe injection)

- CVE-2021-27183 (Remote Code Execution)

Those vulnerabilities were already patched on January 2021 and are published for CVE purposes. They can be chained to achieve RCE/Account Takeover over email message (user interaction required).

Timeline:

15-Dec-2020: Vulnerabilities reports sent to the vendor

12-Jan-2021: Patch published

Patch notes:

https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/

Thank you MDaemon Technologies for quick fixes and good cooperation. :)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!