Vulnerability — CVE-2024-6741

CVE-2024-6741

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2024-6741
Description:: Openfind's Mail2000 has a vulnerability that allows the HttpOnly flag to be bypassed. Unauthenticated remote attackers can exploit this vulnerability using specific JavaScript code to obtain the session cookie with the HttpOnly flag enabled.
Last updated date:: 07/19/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 07/19/2024
Reference url to background: https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf