← CVE Intelligence

CVE-2024-21838

Gallagher / Command Centre Server PUBLISHED

Description (CNA)

Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead to HTML code injection in emails generated by Command Centre. This issue affects: Gallagher Command Centre 9.00 prior to vEL9.00.1774 (MR2), 8.90 prior to vEL8.90.1751 (MR3), 8.80 prior to vEL8.80.1526 (MR4), 8.70 prior to vEL8.70.2526 (MR6),  all version of 8.60 and prior.

Affected (CNA)

Vendor / productVersions
Gallagher / Command Centre Serveraffected 0 through 8.60; affected 9.00 before vEL9.00.1774 (MR2); affected 8.90 before vEL8.90.1751 (MR3); affected 8.80 before vEL8.80.1526 (MR4); affected 8.70 before vEL8.70.2526

CWE

CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.