CVE-2023-24842

概要

参考情報

• twcert.org.tw/tw/cp-132-6961-12444-1.html · Third Party Advisory

oaklouds mailsherlock のその他の脆弱性

• CVE-2023-24841高 7.2HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input. An authenticated remote a…
• CVE-2023-24840高 7.2HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input. An authenticated remote attacker with ad…
• CVE-2023-24839中 6.1HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulner…
• CVE-2018-17542中 5.3SQL Injection exists in MailSherlock before 1.5.235 for OAKlouds allows an unauthenticated user to extract the subjects of the emails of oth…