CVE-2023-24842

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of another user’s mail by changing user ID and mail ID within URL.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published: Mar 27, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-248437.5Transient DOS in Modem while triggering a camping on an 5G cell.CVE-2023-248447.8Memory Corruption in Core while invoking a call to Access Control core library with hardware protected address range.CVE-2023-248459.8A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC,CVE-2023-248477.5Transient DOS in Modem while allocating DSM items.CVE-2023-248487.5Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line value.CVE-2023-248497.5Information Disclosure in data Modem while parsing an FMTP line in an SDP message.CVE-2023-24854.9An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.1 before 15.10.8, all versions starting from 15.11 befo CVE-2023-248507.8Memory Corruption in HLOS while importing a cryptographic key into KeyMaster Trusted Application.CVE-2023-248517.8Memory Corruption in WLAN HOST while parsing QMI response message from firmware.CVE-2023-248527.8Memory Corruption in Core due to secure memory access by user while loading modem image.CVE-2023-248537.8Memory Corruption in HLOS while registering for key provisioning notify.CVE-2023-248547.8Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message.