CVE-2024-48937
11.10.2024, 21:15
Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed.
| Vendor | Product | Version |
|---|---|---|
| znuny | znuny | 6.0.0 ≤ 𝑥 < 6.1.0 |
| znuny | znuny | 6.5.1 ≤ 𝑥 ≤ 6.5.10 |
| znuny | znuny | 7.0.1 ≤ 𝑥 ≤ 7.0.16 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases