Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-28064

May 18, 2024, 10:15 p.m.

Product(s) Impacted

Kiteworks Totemomail

7.x
8.x before 8.3.0

Description

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations (with displayLoginChunkedImages) and write operations (with storeLoginChunkedImages).

Weaknesses

Date

Published: May 18, 2024, 10:15 p.m.

Last Modified: May 18, 2024, 10:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://www.objectif-securite.ch/ cve@mitre.org