CVE-2024-6740

概要

参考情報

• openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf · Exploit
• twcert.org.tw/en/cp-139-7939-3423f-2.html · Third Party Advisory
• twcert.org.tw/tw/cp-132-7938-d9c97-1.html · Third Party Advisory

mail2000 のその他の脆弱性

• CVE-2024-6741中 5.3Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vuln…
• CVE-2024-5400高 8.8Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerabili…
• CVE-2024-5399高 7.2Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vuln…
• CVE-2023-28705中 6.1Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can ex…
• CVE-2023-22902中 5.4Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user priv…