CVE-2023-24839: Hgiga Oaklouds Mailsherlock

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject JavaScript, conducting a reflected XSS attack.

Affected products

• Hgiga Oaklouds Mailsherlock: version 4.5 only

Published 2023-03-27. Last modified 2026-06-17.