7.5

CVE-2024-48938

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Znuny ≫ Znuny SwEditionlts Version >= 6.0.0 < 6.1.0
Znuny ≫ Znuny SwEditionlts Version >= 6.5.1 <= 6.5.10
Znuny ≫ Znuny SwEdition- Version >= 7.0.1 <= 7.0.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.59% 0.444
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA-ADP 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1333 Inefficient Regular Expression Complexity

The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.

https://www.znuny.com
Product
https://www.znuny.org/en/advisories
Vendor Advisory
https://www.znuny.org/en/advisories/zsa-2024-04
Vendor Advisory