VULNERABILITY INTELLIGENCE

CVE-2023-24842

CVSS score5.3 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2023-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL.

Weakness classification

  • twcert@cert.org.tw: CWE-639

Primary references