Unscored severity · published Sep 5, 2013
CVE-2013-5035
Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other products, allow remote authenticated users to read the private…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other products, allow remote authenticated users to read the private e-mail of other persons in opportunistic circumstances by leveraging lack of thread safety and performing a rapid series of (1) mail-sending or (2) draft-saving operations.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HT
Htmlcleaner · Htmlcleaner Project
through 2.5; 0.8; 0.9; 1.0; 1.0.5; 1.1; +13 more · source: NVD
OA
Open-xchange Appsuite · Open-xchange
7.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-5035
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-5035
Exploit
http://archives.neohapsis.com/archives/bugtraq/2013-08/0115.html
Exploit
http://sourceforge.net/p/htmlcleaner/bugs/86/
More from Htmlcleaner
7.5
CVE-2023-34624
An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies