Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-23824

Опубликовано: 02 фев. 2024
Источник: nvd
CVSS3: 4.7
CVSS3: 2.7
EPSS Низкий

Описание

mailcow is a dockerized email package, with multiple containers linked in one bridged network. The application is vulnerable to pixel flood attack, once the payload has been successfully uploaded in the logo the application goes slow and doesn't respond in the admin page. It is tested on the versions 2023-12a and prior and patched in version 2024-01.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mailcow:mailcow\:_dockerized:*:*:*:*:*:*:*:*
Версия до 2024-01 (исключая)

EPSS

Процентиль: 25%
0.00085
Низкий

4.7 Medium

CVSS3

2.7 Low

CVSS3

Дефекты

CWE-400
NVD-CWE-noinfo

EPSS

Процентиль: 25%
0.00085
Низкий

4.7 Medium

CVSS3

2.7 Low

CVSS3

Дефекты

CWE-400
NVD-CWE-noinfo