CVE-2024-48938: High severity znuny vulnerability
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48938?
CVE-2024-48938 is classified as a denial-of-service (DoS) vulnerability that can lead to high CPU usage.
How do I fix CVE-2024-48938?
To mitigate CVE-2024-48938, it is advised to update to a version of Znuny that is beyond 6.5.10 or 7.0.16.
What versions of Znuny are affected by CVE-2024-48938?
CVE-2024-48938 affects Znuny versions before 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16.
How does CVE-2024-48938 exploit email parsing?
CVE-2024-48938 exploits email parsing by causing high CPU usage when parsing HTML content copied from Microsoft Word.
What are the implications of CVE-2024-48938 for users?
Users experiencing CVE-2024-48938 may find their systems become unresponsive due to excessive CPU usage during email processing.