Smartermail 6919 Exploit [better]

This vulnerability was officially patched in . The fix involved:

Administrators must upgrade SmarterMail to a version that addresses CVE-2024-6919. smartermail 6919 exploit

Immediate remediation (prioritize in this order) This vulnerability was officially patched in

: SmarterMail versions up to and including Build 6919 and Build 6970. smartermail 6919 exploit

Audit server logs for unusual activity, as this vulnerability is known to have been exploited in the wild.

When the administrator logs into SmarterMail via the web interface and views their calendar or the specially crafted email, the web browser renders the payload. The onerror event fires, and the administrator’s session cookie (including their ASP.NET_SessionId ) is silently sent to the attacker’s remote server.