Unrated severityNVD Advisory· Published Oct 11, 2024· Updated Mar 14, 2025

CVE-2024-48938

Description

Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process.

Affected products

Znuny/Znunycpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: >=6.5.1 <=6.5.10 or >=7.0.1 <=7.0.16

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.znuny.commitre
www.znuny.org/en/advisoriesmitre
www.znuny.org/en/advisories/zsa-2024-04mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000