Back

CVE-2024-43025

Sept. 18, 2024, 8:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

RWS MultiTrans

  • 7.0.23324.2 and earlier

Source

cve@mitre.org

Tags

cve@mitre.org
2024-09-18
CVE-2024-43025

CVE-2024-43025 details

Published : Sept. 18, 2024, 8:15 p.m.
Last Modified : Sept. 18, 2024, 8:15 p.m.

Description

An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://community.rws.com/product-groups/translation_management/multitrans/w/releases/5112/multitrans-7-releases cve@mitre.org
https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-43025 cve@mitre.org
https://github.com/tomdantuma/CVE/tree/main/2024-43025 cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.