CVE-2024-24304

HIGH

Mailjet < 3.5.1 - Unauthenticated Exposure of Sensitive Technical Information

Title source: llm

In the module "Mailjet" (mailjet) from Mailjet for PrestaShop before versions 3.5.1, a guest can download technical information without restriction.

Core 2

Core References

Release Notes

Patch, Third Party Advisory

CVSS v3 7.5

EPSS 0.0053

EPSS Percentile 40.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-200

Status published

Products (1)

sinch/mailjet < 3.5.1

Published Feb 07, 2024

Tracked Since Feb 18, 2026