CVE-2024-6048
Last modified
CVE-2024-6048 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.. EPSS estimates a 0.68% chance of exploitation in the next 30 days.
Description
Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-6048?
How severe is CVE-2024-6048?
How do I fix CVE-2024-6048?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-6042A vulnerability was found in itsourcecode Real Estate Manage…9.8
- CVE-2024-6043A vulnerability classified as critical has been found in Sou…9.8
- CVE-2024-6044Certain models of D-Link wireless routers have a path traver…6.5
- CVE-2024-6045Certain models of D-Link wireless routers contain an undiscl…8.8
- CVE-2024-6046Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2024-6047Certain EOL GeoVision devices fail to properly filter user i…9.8
- CVE-2024-6049The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is a…7.5
- CVE-2024-6050Improper Neutralization of Input During Web Page Generation …6.1
- CVE-2024-6051Cross Application Scripting vulnerability in Vercom S.A. Red…4.3
- CVE-2024-6052Stored XSS in Checkmk before versions 2.3.0p8, 2.2.0p29, 2.1…5.4
- CVE-2024-6053Improper access control in the clipboard synchronization fea…4.3
- CVE-2024-6054The Auto Featured Image plugin for WordPress is vulnerable t…8.8
Are you affected by CVE-2024-6048?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST