CVE-2024-48905

Sematell ReplyOne version 7.4.3.0 is affected by a vulnerability involving Insecure Permissions on the /rest/sessions endpoint. This improper access control could potentially allow unauthorized access or actions, specifically leading to unsafe direct object references . To mitigate this risk, it ...

CVE-2024-48906

Sematell ReplyOne version 7.4.3.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The vulnerability is triggered via a ReplyDesk e-mail attachment name , where an attacker can inject malicious scripts into the system. These scripts c...

CVE-2024-48907

Sematell ReplyOne version 7.4.3.0 is vulnerable to Server-Side Request Forgery (SSRF) via the application server API. This vulnerability allows an attacker to manipulate the server into making unauthorized requests. To mitigate the risk, it is recommended to restrict access to the application ser...