CVE-2024-6741

PoC —

CVSS 3.1

5.3 medium

EPSS

<1%p49

Published

Jul 15, 2024 (Jul 15, 2024)

Modified

Jun 17, 2026

Description

Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using specific JavaScript code to obtain the session cookie with the HttpOnly flag enabled.

Vendors: openfind
Products: mail2000
Weakness: CWE-693
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.