CVE-2023-41704CWE-79

Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine

High · published February 12, 2024

CVSS v3.1
7.1
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine. Malicious script code could be injected to a users sessions when interacting with E-Mails. Please deploy the provided updates and patch releases. CID handing has been improved and resulting content is checked for malicious content. No publicly available exploits are known.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00528 · 43.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-02-12T08:15Z
EPSS history
Timeline
  • 12 FEB 08:15Z
    Processing of CID references at E-Mail can be abused to inject malicious script code that passes the sanitization engine
    cvelistv5