Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the users browser session. Common user interaction is required for the vulnerability to trigger. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. We now use safer methods of handling external content when embedding attachment information to the web interface. No publicly available exploits are known.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-20707 | Maliciously crafted E-Mail attachment names could be used to temporarily execute script code in the context of the users browser session. Common user interaction is required for the vulnerability to trigger. Attackers could perform malicious API requests or extract information from the users account. Please deploy the provided updates and patch releases. We now use safer methods of handling external content when embedding attachment information to the web interface. No publicly available exploits are known. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: OX
Published:
Updated: 2025-02-13T17:33:48.139Z
Reserved: 2024-01-12T07:03:12.862Z
Link: CVE-2024-23188
Vulnrichment
Updated: 2024-08-01T22:59:32.221Z
NVD
Status : Awaiting Analysis
Published: 2024-05-06T07:15:07.137
Modified: 2024-11-21T08:57:09.290
Link: CVE-2024-23188
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses