Vulnerabilities > CVE-2024-48938 - Unspecified vulnerability in Znuny

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

znuny

NVD

Published: 2024-10-11

Updated: 2024-10-17

Summary

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.

Vulnerable Configurations

Part	Description	Count
Application	Znuny Znuny Znuny 6.0.31 Znuny Znuny 6.0.32 Znuny Znuny 6.0.33 Znuny Znuny 6.0.34 Znuny Znuny 6.0.35 Znuny Znuny 6.0.36 Znuny Znuny 6.0.37 Znuny Znuny 6.0.38 Znuny Znuny 6.0.39 Znuny Znuny 6.0.40 Znuny Znuny 6.0.41 Znuny Znuny 6.0.42 Znuny Znuny 6.0.43 Znuny Znuny 6.0.44 Znuny Znuny 6.0.45 Znuny Znuny 6.0.46 Znuny Znuny 6.0.47 Znuny Znuny 6.0.48 Znuny Znuny 7.0.1 Znuny Znuny 7.0.2 Znuny Znuny 7.0.3 Znuny Znuny 7.0.4 Znuny Znuny 7.0.5 Znuny Znuny 7.0.6 Znuny Znuny 7.0.7 Znuny Znuny 7.0.8 Znuny Znuny 7.0.9 Znuny Znuny 7.0.10 Znuny Znuny 7.0.11 Znuny Znuny 7.0.12 Znuny Znuny 7.0.13 Znuny Znuny 7.0.14 Znuny Znuny 7.0.15 Znuny Znuny 7.0.16 Znuny Znuny 6.5.1 Znuny Znuny 6.5.2 Znuny Znuny 6.5.3 Znuny Znuny 6.5.4 Znuny Znuny 6.5.5 Znuny Znuny 6.5.6 Znuny Znuny 6.5.7 Znuny Znuny 6.5.8	42

Summary

Vulnerable Configurations

References