PT-2025-29836 · Meta Inf Kft. · Email This Issue

Published 2025-07-16 · Updated 2025-07-17 · CVE-2024-42912

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions META-INF Kft. Email This Issue (Data Center) versions prior to 9.13.0-GA

Description A cross-site scripting (XSS) issue exists in META-INF Kft. Email This Issue (Data Center). Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the recipient field of an e-mail message.

Recommendations Update to version 9.13.0-GA or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-42912

Affected Products

Email This Issue

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-42912 · Security Note
• https://t.me/cvenotify/129377 · Telegram Post
• https://tracker.bugcrowd.com/metainfkft/submissions/51e58658-220e-4614-b605-c8d662b5c426 · Note
• https://docs.meta-inf.hu/email-this-issue/email-this-issue-for-jira-server-data-center/misc/security-advisories/email-this-issue-security-advisory-2025-06-30 · Note
• https://twitter.com/CVEnew/status/1945562991585358127 · Twitter Post
• https://t.me/cvetracker/27965 · Telegram Post