Lucene search

CVE-2024-41959

🗓️ 05 Aug 2024 20:36:15Reported by [email protected]Type

Open source mailcow: dockerized groupware/email suite vulnerability addressed in `2024-07` release, allowing unauthenticated injection of JavaScript payload in API logs leading to potential unauthorized actions, data theft, and system exploitation

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 5
OSV	CVE-2024-41959	5 Aug 202420:15	–	osv
RedhatCVE	CVE-2024-41959	5 Feb 202507:42	–	redhatcve
Vulnrichment	CVE-2024-41959 Cross-site Scripting (XSS) via API Logs in mailcow: dockerized	5 Aug 202419:59	–	vulnrichment
Cvelist	CVE-2024-41959 Cross-site Scripting (XSS) via API Logs in mailcow: dockerized	5 Aug 202419:59	–	cvelist
CVE	CVE-2024-41959	5 Aug 202420:15	–	cve

Nvd

Node

mailcow mailcow:_dockerizedRange<2024-07

Source	Link
github	www.github.com/mailcow/mailcow-dockerized/commit/66aa28b5de282fc037e0d2f02fbdc84539b614a1
github	www.github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-v3r3-8f69-ph29

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Aug 2024 20:15Current

CVSS36.1 - 7.6

EPSS0.00608

CWE-79