CVE-2024-6741

概要

参考情報

• openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf · Exploit
• twcert.org.tw/en/cp-139-7941-b66e7-2.html · Third Party Advisory
• twcert.org.tw/tw/cp-132-7940-0177a-1.html · Third Party Advisory

mail2000 のその他の脆弱性

• CVE-2024-6740中 6.1Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within …
• CVE-2024-5400高 8.8Openfind Mail2000 does not properly filter parameters of specific CGI. Remote attackers with regular privileges can exploit this vulnerabili…
• CVE-2024-5399高 7.2Openfind Mail2000 does not properly filter parameters of specific API. Remote attackers with administrative privileges can exploit this vuln…
• CVE-2023-28705中 6.1Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can ex…
• CVE-2023-22902中 5.4Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user priv…