Vulnerabilities

TI-2021-19387 CVE-2021-43462 · GHSA-958g-mwrp-mxhr

A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.

LOW 25

A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00583 Published 2022-04-04 No fix listed CWE-79

TI-2021-19386 CVE-2021-43461 · GHSA-9w74-wx8f-qmw3

Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.

LOW 25

Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00583 Published 2022-04-04 No fix listed CWE-79

TI-2021-19384 CVE-2021-43459 · GHSA-p34c-q2vq-qvvv

A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the…

LOW 25

A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) path parameters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00583 Published 2022-04-04 No fix listed CWE-79

TI-2021-19381 CVE-2021-43456 · GHSA-px83-mv29-qm8q

An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a…

LOW 34

An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted file in the RumbleService executable service path.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00447 Published 2022-04-04 No fix listed CWE-428

Vulnerabilities

Filters

A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.

Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.

A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the…

An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a…