CVE-2024-48938

HIGH

7.5

Description

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published10/11/2024

Last Modified3/14/2025

Sourcenvd

Honeypot Sightings0

Affected Products

znuny:znuny

Weaknesses (CWE)

CWE-1333CWE-1333

References

https://www.znuny.com(cve@mitre.org)

https://www.znuny.org/en/advisories(cve@mitre.org)

https://www.znuny.org/en/advisories/zsa-2024-04(cve@mitre.org)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.