IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• icewarp mail serverup to 10.3.2 inclusive
• icewarp mail server10.0.3
• icewarp mail server10.0.4
• icewarp mail server10.0.7
• icewarp mail server10.0.8
• icewarp mail server10.1.1
• icewarp mail server10.1.2
• icewarp mail server10.1.3
• icewarp mail server10.1.4
• icewarp mail server10.2.0
• icewarp mail server10.2.1
• icewarp mail server10.2.2
• icewarp mail server10.3.0
• icewarp mail server10.3.1
• icewarp mail server9.3.0
• icewarp mail server9.3.1
• icewarp mail server9.3.2
• icewarp mail server9.4.0
• icewarp mail server9.4.1
• icewarp mail server9.4.2

Other highest-scoring records for the same primary product.

• CVE-2015-1503Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) ..
  47Plan
• CVE-2019-12593IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c dir
  42Plan
• CVE-2023-39699IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /calendar/minimizer/index
  39Monitor
• CVE-2020-14066IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access.
  36Monitor
• CVE-2020-27982IceWarp 11.4.5.0 allows XSS via the language parameter.
  26Monitor
• CVE-2020-14065IceWarp Email Server 12.3.0.1 allows remote attackers to upload files and consume disk space.
  26Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

The extension requests broader permissions than its function needs and sends the data it collects out for purposes beyond its stated function.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1{2  "permissions": ["tabs", "<all_urls>"],3  "background": { "service_worker": "analytics.js" }4}

1{2  "permissions": ["activeTab"],3  "host_permissions": ["https://yildiz.example/*"]4}

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.