An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail.
Metrics
Affected Vendors & Products
References
History
Mon, 30 Sep 2024 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Rws
Rws multitrans |
|
Weaknesses | CWE-79 | |
CPEs | cpe:2.3:a:rws:multitrans:*:*:*:*:*:*:*:* | |
Vendors & Products |
Rws
Rws multitrans |
|
Metrics |
cvssV3_1
|
Thu, 19 Sep 2024 17:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Wed, 18 Sep 2024 19:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-09-18T00:00:00
Updated: 2024-09-19T16:58:13.807Z
Reserved: 2024-08-05T00:00:00
Link: CVE-2024-43025
Vulnrichment
Updated: 2024-09-19T16:58:10.904Z
NVD
Status : Analyzed
Published: 2024-09-18T20:15:03.343
Modified: 2024-09-30T17:51:48.050
Link: CVE-2024-43025
Redhat
No data.