CNNVD-202507-2235 Information

CNNVD ID

CNNVD-202507-2235

CVE-2024-42912

  • CNNVD Published: 2025-07-16

Description (Chinese)

META-INF Kft. Email This Issue是匈牙利META-INF Kft.公司的一款用于Jira的高级电子邮件管理插件。 META-INF Kft. Email This Issue 9.13.0-GA之前版本存在安全漏洞,该漏洞源于收件人字段注入特制有效载荷,可能导致执行任意Web脚本。

Description (English)

META-INF Kft. Email This Issue is an advanced e-mail management plugin for Jira from META-INF Kft. Hungary. META-INF Kft. Email This Issue 9.13.0-GA has a security loophole, which arises from the injection of a special payload into the recipient’s field and may lead to the execution of any Web script.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

MetaCPAN

Published

2025-07-16

Last Modified

2026-02-24

References

https://docs.meta-inf.hu/email-this-issue/email-this-issue-for-jira-server-data-center/misc/security-advisories/email-this-issue-security-advisory-2025-06-30 https://tracker.bugcrowd.com/metainfkft/submissions/51e58658-220e-4614-b605-c8d662b5c426

Patch

https://www.meta-inf.hu/en/apps/email-this-issue-for-jira

Share on: