29 matches found
CVE-2024-48906
Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...
PT-2025-18712 · Sematell · Sematell Replyone
Name of the Vulnerable Software and Affected Versions: Sematell ReplyOne version 7.4.3.0 Description: The issue concerns insecure permissions for the "/rest/sessions" endpoint. This could potentially allow unauthorized access or actions. Recommendations: For Sematell ReplyOne version 7.4.3.0,...
CVE-2024-48906
Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...
Sematell ReplyOne 安全漏洞
Sematell ReplyOne is an artificial intelligence-based reply management software from Sematell. A security vulnerability exists in Sematell ReplyOne version 7.4.3.0 that stems from the presence of cross-site scripting via ReplyDesk email attachment names...
CVE-2024-48906: Improper Neutralization of Input During Web Page Generation
Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...
CVE-2024-48905
Sematell ReplyOne version 7.4.3.0 is affected by a vulnerability involving Insecure Permissions on the /rest/sessions endpoint. This improper access control could potentially allow unauthorized access or actions, specifically leading to unsafe direct object references . To mitigate this risk, it ...
CVE-2024-48907: Server-Side Request Forgery (SSRF)
Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...