CVE-2024-43025

MEDIO 6.1CVE-2024-43025 · Published 18/09/2024 · updated 17/06/2026

In breve

CVE-2024-43025 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda multitrans (rws).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.34%, superiore al 27.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
multitrans rws	`≤ 7.0.23324.2`	No fix yet

Description

An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail.

References

community.rws.com/product-groups/translation_management/multitrans/w/releases/5112/multitrans-7-releases · Release Notes
Sharpe-nl/CVEs · Third Party Advisory
tomdantuma/CVE · Third Party Advisory

Altre vulnerabilità di multitrans

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free