CVE-2021-36580

EUVD-2021-23177
Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter.
Open Redirect
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.1 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 92%
Affected Products (NVD)
VendorProductVersion
icewarpicewarp_server
𝑥
< 13.0.1.2
icewarpmail_server
𝑥
< 13.0.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://icewarp.com
http://mail.ziyan.com
https://medium.com/%40rohitgautam26/cve-2021-36580-69219798231c
http://icewarp.com
http://mail.ziyan.com
https://medium.com/%40rohitgautam26/cve-2021-36580-69219798231c