Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-28064

Published: 18/05/2024 Updated: 20/05/2024

Vulnerability Summary

Kiteworks Totemomail 7.x and 8.x prior to 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations (with displayLoginChunkedImages) and write operations (with storeLoginChunkedImages).

Vulnerability Trend

References

https://www.objectif-securite.ch/advisories/totemomail-path-traversal.txthttps://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
validationCVE-2012-1823malicious code‎CVE-2024-5770CVE-2023-45866CVE-2024-35687local usersCVE-2024-31246CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook