PT-2024-20732 · Axigen · Axigen

Clément Lecigne · Published 2024-04-01 · Updated 2024-11-01 · CVE-2024-25080

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Axigen versions 10.0 through 10.3.3.61

Description The issue allows for cross-site scripting (XSS) via the image attachment viewer in WebMail. This could potentially affect a significant number of devices worldwide, although the exact number is not specified.

Recommendations For versions 10.0 through 10.3.3.61, update to version 10.3.3.62 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-25080

Affected Products

Axigen

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-25080 · Security Note
• https://axigen.com/knowledgebase/Axigen-WebMail-XSS-Vulnerability-CVE-2024-25080-_401.html · Note
• https://axigen.com/mail-server/axigen-older-features · Note
• https://t.me/cvenotify/100343 · Telegram Post
• https://t.me/cvenotify/75297 · Telegram Post