CVE-2022-30776

Deeper analysis

CVE-2022-30776 is a reflected cross-site scripting vulnerability (CWE-79) affecting Atmail version 6.5.0. The flaw resides in the error parameter of the index.php/admin/index/ endpoint and carries a CVSS 3.1 score of 6.1, reflecting network attack vector, low complexity, no required privileges, and required user interaction with changed scope.

An unauthenticated remote attacker can supply a crafted URL containing malicious JavaScript in the error parameter; when an administrator visits the link, the script executes in the victim's browser context, enabling limited data exposure or actions within the Atmail administrative interface.

Official Atmail documentation sections and a technical write-up are referenced in public advisories, though no specific patch or configuration guidance is detailed in the available references. The associated EPSS score rose from a low baseline to a peak of 0.5015 on 2025-12-11 before receding to the current value of 0.4553, indicating measurable post-disclosure exploitation interest.