CVE-2024-48905

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint.

Score

CVSS 3.1 9.1 Critical

Status

Analyzed - cve@mitre.org

Published

2025-05-01

Last modified

2025-05-06

Weaknesses

CWE-284

Affected products

• Replyone (Sematell)

References

• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-082.txt