CVE-2024-33231

Summary

CVE-2024-33231 is a Cross-Site Scripting (XSS) vulnerability affecting Ferozo Email version 1.1. This issue allows a local attacker to inject malicious code into the PDF preview component, potentially leading to arbitrary execution. An attacker could use a specially crafted PDF file to exploit this vulnerability and gain unauthorized access to user data or take control of the user's session. Users are strongly advised to update their Ferozo Email software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.