Vulnerability Description
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Znuny | Znuny | >= 6.0.0, < 6.1.0 |
Related Weaknesses (CWE)
References
- https://www.znuny.comProduct
- https://www.znuny.org/en/advisoriesVendor Advisory
- https://www.znuny.org/en/advisories/zsa-2024-04Vendor Advisory
FAQ
What is CVE-2024-48938?
CVE-2024-48938 is a vulnerability with a CVSS score of 7.5 (HIGH). Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and ...
How severe is CVE-2024-48938?
CVE-2024-48938 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-48938?
Check the references section above for vendor advisories and patch information. Affected products include: Znuny Znuny.