Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations (with displayLoginChunkedImages) and write operations (with storeLoginChunkedImages).
Metrics
Affected Vendors & Products
References
History
Thu, 13 Feb 2025 16:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Kiteworks
Kiteworks totemomail |
|
CPEs | cpe:2.3:a:kiteworks:totemomail:7.0:*:*:*:*:*:*:* cpe:2.3:a:kiteworks:totemomail:8.0:*:*:*:*:*:*:* |
|
Vendors & Products |
Kiteworks
Kiteworks totemomail |
|
Metrics |
ssvc
|
Fri, 06 Sep 2024 19:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
cvssV3_1
|
cvssV3_1
|

Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-02-13T15:47:34.149Z
Reserved: 2024-03-01T00:00:00.000Z
Link: CVE-2024-28064

Updated: 2024-08-02T00:48:48.248Z

Status : Awaiting Analysis
Published: 2024-05-18T22:15:07.343
Modified: 2024-11-21T09:05:43.883
Link: CVE-2024-28064

No data.