PT-2024-23630 · Silversky · Silversky E-Mail Service

Excis3 · Published 2024-06-20 · Updated 2024-08-01 · CVE-2024-30848

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SilverSky E-mail service version 5.0.3126

Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the version parameter. This could potentially lead to unauthorized actions on the affected system.

Recommendations For SilverSky E-mail service version 5.0.3126, consider disabling the version parameter until a patch is available to prevent exploitation. Restrict access to the version parameter to minimize the risk of arbitrary web script or HTML injection.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-30848

Affected Products

Silversky E-Mail Service

References · 5

• 🔥 https://github.com/Excis3/CVE-Disclosure/blob/main/CVE-2024-30848.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-30848 · Security Note
• https://twitter.com/CVEnew/status/1803899465402905040 · Twitter Post
• https://t.me/cvenotify/83935 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1803964154019033388 · Twitter Post