Medium severity4.7NVD Advisory· Published Feb 2, 2024· Updated Jun 17, 2026

CVE-2024-23824

Description

mailcow is a dockerized email package, with multiple containers linked in one bridged network. The application is vulnerable to pixel flood attack, once the payload has been successfully uploaded in the logo the application goes slow and doesn't respond in the admin page. It is tested on the versions 2023-12a and prior and patched in version 2024-01.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mailcow/Mailcow\
cpe:2.3:a:mailcow:mailcow\:_dockerized:*:*:*:*:*:*:*:*
Range: <2024-01
Mailcow/Mailcow Dockerizedllm-fuzzy2 versions
<=2023-12a+ 1 more
- (no CPE)range: <=2023-12a
- (no CPE)range: < 2024-01

Patches

Vulnerability mechanics

References

github.com/mailcow/mailcow-dockerized/commit/7f6f7e0e9ff608618e5b144bcf18d279610aa3ednvdPatch
github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-45rv-3c5p-w4h7nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000