CVE-2024-5400

概要

参考情報

• twcert.org.tw/tw/cp-132-7819-9661a-1.html · Vendor Advisory

mail2000 のその他の脆弱性

• CVE-2024-6741中 5.3Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vuln…
• CVE-2024-6740中 6.1Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within …
• CVE-2024-5399高 7.2Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vuln…
• CVE-2023-28705中 6.1Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can ex…
• CVE-2023-22902中 5.4Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user priv…