VULNERABILITY INTELLIGENCE
CVE-2024-6048
CVSS score9.8 CRITICAL
EPSS probability0.68%
CISA KEVNot currently listed
Published2024-06-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
Weakness classification
- twcert@cert.org.tw: CWE-78