CVE-2024-31204

6.1 · MEDIUM

Published Apr 4, 2024 mailcow CWE-79 EPSS 8.25% (95th pctl) CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

Overview

CVE-2024-31204 is a medium-severity vulnerability affecting mailcow mailcow\. It was published on April 4, 2024 and has a CVSS 3.1 base score of 6.1 (MEDIUM).

This vulnerability has a CVSS 3.1 base score of 6.1, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical Description

mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versions prior to 2024-04. This vulnerability resides in the exception handling mechanism, specifically when not operating in DEV_MODE. The system saves exception details into a session array without proper sanitization or encoding. These details are later rendered into HTML and executed in a JavaScript block within the user's browser, without adequate escaping of HTML entities. This flaw allows for Cross-Site Scripting (XSS) attacks, where attackers can inject malicious scripts into the admin panel by triggering exceptions with controlled input. The exploitation method involves using any function that might throw an exception with user-controllable argument. This issue can lead to session hijacking and unauthorized administrative actions, posing a significant security risk. Version 2024-04 contains a fix for the issue.

Remediation

Check the references section for vendor advisories and patches from mailcow. Update mailcow\ to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

Vendor	Product	Versions	Status
mailcow	mailcow\	>= 0, < 2024-04	Affected

References

GitHub github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-fp6h-63w4-5hcm Ref www.sonarsource.com/blog/remote-code-execution-in-mailcow-always-sanitize-error-messages GitHub github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-fp6h-63w4-5hcm Ref www.vicarius.io/vsociety/posts/mailcow-with-xss-and-path-traversal-cve-2024-31204-and-cve-2024-30270

Frequently Asked Questions

What is CVE-2024-31204?

CVE-2024-31204 is a medium-severity vulnerability affecting mailcow mailcow\. It was published on April 4, 2024 and has a CVSS 3.1 base score of 6.1 (MEDIUM).

How severe is CVE-2024-31204?

This vulnerability has a CVSS 3.1 base score of 6.1, rated MEDIUM. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2024-31204?

How can CyberStrike help with CVE-2024-31204?

CyberStrike's AI-powered security agents can automatically detect CVE-2024-31204 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.

How CyberStrike Helps

Autonomous Discovery

AI agents map your attack surface to find vulnerabilities like this one.

Continuous Pentesting

Automated penetration testing that runs continuously, not just quarterly.

Code Review

AI-driven PR review catches vulnerable dependencies before they ship.

HackBrowser

Browser-based exploitation validates findings with real proof-of-concept.

Related MEDIUM CVEs from 2024

View all →

6.9

CVE-2023-3726

OCSInventory allow stored email template with special characters that lead to a Stored cross-site Sc

6.9

CVE-2023-51719