PT-2025-18713 · Sematell · Sematell Replyone

Name of the Vulnerable Software and Affected Versions: Sematell ReplyOne version 7.4.3.0 Description: The issue allows for cross-site scripting XSS attacks through a ReplyDesk e-mail attachment name. This means an attacker could potentially inject malicious scripts into the system by manipulating...

CVE-2024-48907

Sematell ReplyOne version 7.4.3.0 is vulnerable to Server-Side Request Forgery (SSRF) via the application server API. This vulnerability allows an attacker to manipulate the server into making unauthorized requests. To mitigate the risk, it is recommended to restrict access to the application ser...

CVE-2024-48906

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...

PT-2025-18712 · Sematell · Sematell Replyone

Name of the Vulnerable Software and Affected Versions: Sematell ReplyOne version 7.4.3.0 Description: The issue concerns insecure permissions for the "/rest/sessions" endpoint. This could potentially allow unauthorized access or actions. Recommendations: For Sematell ReplyOne version 7.4.3.0,...

CVE-2024-48906

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...

CVE-2024-48907

Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...

CVE-2024-48905

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...

CVE-2024-48907: Server-Side Request Forgery (SSRF)

Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...

CVE-2024-48905: Improper Access Control

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...