CVE-2024-6048
Openfind MailGates and MailAudit - OS Command Injection
- Published
- Updated
- Reserved
- Assigned by
- twcert
Description
Openfind's MailGates and MailAudit fail to properly filter user input when analyzing email attachments. An unauthenticated remote attacker can exploit this vulnerability to inject system commands and execute them on the remote server.
Timeline
ID reserved
By twcert
Published
- 45 days later
· 45 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| twcertCNA (assigner) | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | Critical9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.68% · top 47% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: yes · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.8.
Weakness
Affected products
- affected earlier – < Patch 5.2.10.094
- affected earlier – < Patch 5.2.10.094
- affected earlier – < Patch 6.1.7.037
- affected earlier – < Patch 6.1.7.037
What to do
Solution: Update MailGates/MailAudit v5.0 to Patch 5.2.10.094 or later. Update MailAudit/MailAudit v6.0 to Patch 6.1.7.037 or later.
References (2)
- https://www.twcert.org.tw/tw/cp-132-7885-a8013-1.html (opens in a new tab)third-party-advisoryx_transferred
- https://www.twcert.org.tw/en/cp-139-7886-20b61-2.html (opens in a new tab)third-party-advisoryx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-6048)Record last updated .