« Volver al listado

CVE-2024-6048

Estado: AplazadaCrítica (9.8)—

Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Openfind — MailauditAIOpenfind — MailgatesAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-6048",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-6048",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-19T18:41:10.931458Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "twcert@cert.org.tw",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "twcert@cert.org.tw",
      "affectedData": [
        {
          "vendor": "Openfind",
          "product": "MailGates 5.0",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "Patch 5.2.10.094",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Openfind",
          "product": "MailAudit 5.0",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "Patch 5.2.10.094",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Openfind",
          "product": "MailGates 6.0",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "Patch 6.1.7.037",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Openfind",
          "product": "MailAudit 6.0",
          "versions": [
            {
              "status": "affected",
              "version": "earlier",
              "lessThan": "Patch 6.1.7.037",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:openfind:mailgates:*:*:*:*:*:*:*:*"
          ],
          "vendor": "openfind",
          "product": "mailgates",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "5.2.10.094",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:openfind:mailaudit:*:*:*:*:*:*:*:*"
          ],
          "vendor": "openfind",
          "product": "mailaudit",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "5.2.10.094",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:openfind:mailgates:*:*:*:*:*:*:*:*"
          ],
          "vendor": "openfind",
          "product": "mailgates",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "6.1.7.037",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:openfind:mailaudit:*:*:*:*:*:*:*:*"
          ],
          "vendor": "openfind",
          "product": "mailaudit",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "6.1.7.037",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-17T08:15:49.150",
  "references": [
    {
      "url": "https://www.twcert.org.tw/en/cp-139-7886-20b61-2.html",
      "source": "twcert@cert.org.tw"
    },
    {
      "url": "https://www.twcert.org.tw/tw/cp-132-7885-a8013-1.html",
      "source": "twcert@cert.org.tw"
    },
    {
      "url": "https://www.twcert.org.tw/en/cp-139-7886-20b61-2.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.twcert.org.tw/tw/cp-132-7885-a8013-1.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "twcert@cert.org.tw",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server."
    },
    {
      "lang": "es",
      "value": "MailGates y MailAudit de Openfind no filtran adecuadamente la entrada del usuario al analizar los archivos adjuntos de correo electrónico. Un atacante remoto no autenticado puede aprovechar esta vulnerabilidad para inyectar comandos del sistema y ejecutarlos en el servidor remoto."
    }
  ],
  "lastModified": "2026-06-17T08:17:10.647",
  "sourceIdentifier": "twcert@cert.org.tw"
}