Open Xchange Appsuite Frontend

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-4367 npm HIGH POC PATCH THREAT CISA Act Now

Arbitrary JavaScript execution in Mozilla's PDF.js library affects Firefox before 126, Firefox ESR before 115.11, and Thunderbird before 115.11 when rendering a malicious PDF document. A missing type check in font handling lets a crafted PDF run JavaScript in the PDF.js context, and publicly available exploit code exists with an EPSS of 34.61% (97th percentile) indicating elevated exploitation likelihood.

Information Disclosure Mozilla Debian Linux Firefox Thunderbird +1

NVD GitHub Exploit-DB

CVSS 3.1

8.8

EPSS

34.6%

Threat

6.3

CVE-2024-4367 npm

EPSS 35% 6.3 CVSS 8.8

HIGH POC PATCH THREAT Act Now

Information Disclosure Mozilla Debian Linux +3

NVD GitHub Exploit-DB