Coremail mobile storage XSS Vulnerability

Coremail mobile storage XSS Vulnerability

An XSS vulnerability was discovered after a brain hole was opened.

Our school's internal mailbox is coremail.

After logging in, set in the upper right corner-Modify Personal Data

Change it to
 

Save. Send email to another user

When the recipient logs in from the mobile phone, a window pops up ~
 

The cause of the vulnerability is that the mobile Web side does not filter the sender's name.







In this case, the attack is simple. I only need to change my name to payload and send emails to anyone to get the cookie.

 

 

 

Solution:

Pay attention to mobile Web-side Filtering