CVE-2024-48937: XSS
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48937?
CVE-2024-48937 is classified as a medium severity vulnerability due to its potential to allow cross-site scripting (XSS) attacks.
How do I fix CVE-2024-48937?
To fix CVE-2024-48937, upgrade your Znuny installation to version 6.5.11 or 7.0.17 or higher to ensure the vulnerability is patched.
What types of attacks can CVE-2024-48937 facilitate?
CVE-2024-48937 can facilitate cross-site scripting (XSS) attacks, allowing attackers to execute malicious JavaScript in user sessions.
Which versions of Znuny are affected by CVE-2024-48937?
CVE-2024-48937 affects Znuny versions before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16.
What is the impact of CVE-2024-48937 on users?
The impact of CVE-2024-48937 on users includes the risk of script execution which may lead to data theft, session hijacking, or other malicious activities.