Vulnerability CVE-2024-6739
Published: 2024-07-15

Description:
The session cookie in MailGates and MailAudit from Openfind does not have the HttpOnly flag enabled, allowing remote attackers to potentially steal the session cookie via XSS.

Type:

CWE-1004

 References:
https://www.twcert.org.tw/tw/cp-132-7927-03837-1.html
https://www.twcert.org.tw/en/cp-139-7928-04e8a-2.html
https://www.openfind.com.tw/taiwan/download/Openfind_OF-ISAC-24-007.pdf
Copyright 2026, cxsecurity.com

 

Back to Top