CVE-2024-6118

9.3 criticalEPSS 0.5%

Critical (9.3) in hamastar meetinghub paperless meetings. EPSS 0.5% chance of exploitation in the next 30 days.

A Plaintext Storage of a Password vulnerability in ebooknote function in Hamastar MeetingHub Paperless Meetings 2021 allows remote attackers to obtain the other users’ credentials and gain access to the product via an XML file.

Severity

CVSS 4.0

9.3 critical

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWEs: CWE-522, CWE-256
Published: 2024-08-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hamastar:meetinghub_paperless_meetings

References

https://zuso.ai/advisory/za-2024-03

Check your stack JSON