TVN ID	TVN-202407006
CVE ID	CVE-2024-6740
CVSS	6.1 (Medium) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected Products	Mail2000 V7.0, V8.0
Description	Openfind's Mail2000 does not properly validate email atachments, allowing unauthenticated remote attackers to inject JavaScript code within the attachment and perform Stored Cross-site scripting attacks.
Solution	Update Mail2000 V7.0 to Patch 131 or later Update Mail2000 V8.0 to Patch 044 or later
Credit	周詳(Ministry of Digital Affairs)
Public Date	2024-07-15