p PatchFirst

CVE-2024-32492

CVE-2024-32492

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the execution of external JavaScript.

CVSS 7.1 · High · EPSS 0.5%

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • znuny Ubuntu:24.04:LTS

    Versions
    • 6.5.3-1
    • 6.5.4-1
    • 6.5.5-1
    • 6.5.6-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:25.10

    Versions
    • 6.5.14-1
    • 6.5.15-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:26.10

    Versions
    • 6.5.18-1
    • 6.5.20-1
    • 6.5.21-1
    • 6.5.22-1
    • 6.5.23-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • znuny Ubuntu:26.04:LTS

    Versions
    • 6.5.15-2
    • 6.5.18-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →