CVSS 3.1 Score 6.8 of 10 (medium)


Published Mar 5, 2024


CVE-2024-21838 is a vulnerability that affects Gallagher Command Centre versions 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6), and all versions of 8.60 and prior. This vulnerability is categorized as CWE-74, which refers to the improper neutralization of special elements in output, leading to HTML code injection in emails generated by Command Centre's email generation feature. The vulnerability has a base severity rating of MEDIUM and requires low privileges and user interaction for exploitation, with a network attack vector and high integrity impact but no confidentiality impact. The CVSS score for this vulnerability is 6.8 out of 10, indicating its potential danger to affected organizations' systems and data integrity. Remediation measures are not specified in the provided information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-21838 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options