IceWarp Mail Server 漏洞列表

IceWarp Mail Server ≤11.4.0存在重定向漏洞，这可能会导致网络钓鱼攻击或其他意外重定向。

IceWarp Mail Server versions prior to 11.1.1 suffer from a directory traversal vulnerability.

IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal.

IceWarp Mail Server contains an open redirect via the referer parameter. This can lead to phishing attacks or other unintended redirects.

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter.

An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL.

IceWarp Mail Server version 11.4.0 and below contains an open redirect vulnerability that allows attackers to redirect users to arbitrary external domains through malicious URLs.

IceWarp MailServer是美国IceWarp公司的一款邮件服务器产品，存在一个通过引用参数的开放重定向漏洞，这可能会导致网络钓鱼攻击或其他意外重定向。

IceWarp Mail Server10.4.4版本容易通过webmail/calendar/minimizer/index.php出现本地文件包含漏洞？样式=..%5c目录遍历。