Vulnerabilities

TI-2024-32604 CVE-2024-48907 · GHSA-pf87-p9pq-44q4

Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API.

HIGH 72

Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00448 Published 2025-05-01 No fix listed CWE-918

TI-2024-32603 CVE-2024-48906 · GHSA-gwq8-8443-vx69

MEDIUM 60

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00284 Published 2025-05-01 No fix listed CWE-79

TI-2024-32602 CVE-2024-48905 · GHSA-9mp8-vffv-mgvx

HIGH 80

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00448 Published 2025-05-01 No fix listed CWE-284