CVE-2026-102372: fallo de gravedad media en GestSup
GestSup before 3.2.61 Stored XSS via Email Body in LOGIN IMAP Connector
Publicada el · Actualizada el
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 5.3epss 0.2%
probabilidad de explotación
0.2%top 90% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
GestSup versions before 3.2.61 fail to properly sanitize HTML email bodies in the IMAP LOGIN connector, allowing unauthenticated attackers to store arbitrary JavaScript in ticket descriptions and replies. Attackers can send emails to the monitored mailbox containing script tags and event handlers that execute in technician browsers, enabling ticket data theft and unauthorized actions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
Productos afectados
GestSup · GestSupPoCs públicas encontradas — 1
cve_referenceblog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — GestSup
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-100389CRITICALGestSup before 3.2.62 Remote Code Execution via IMAP AttachmentEPSS 0.6%CVE-2026-22197HIGHGestSup < 3.2.60 Multiple SQL Injections in Asset ListEPSS 0.3%CVE-2026-22196HIGHGestSup < 3.2.60 SQL Injection in Ticket CreationEPSS 0.3%CVE-2026-22195HIGHGestSup < 3.2.60 SQL Injection in Search BarEPSS 0.3%CVE-2026-22198MEDIUMGestSup < 3.2.60 Stored XSS in API Error LogsEPSS 0.3%CVE-2026-102373HIGHGestSup before 3.2.62 Private Ticket Comment Disclosure via threadedit ParameterEPSS 0.2%
Referencias
https://blog.spiizn.xyz/articles/remote-code-execution-turning-a-ticket-into-a-new-issue/https://gestsup.fr/index.php?page=changeloghttps://gestsup.fr/index.php?page=downloadhttps://gestsup.fr/index.php?page=download&channel=stable&version=3.2.61&type=patchhttps://www.vulncheck.com/advisories/gestsup-before-3.2.62-stored-xss-via-email-body-in-login-imap-connector