A vulnerability in the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct a CRLF injection attack due to inadequate encoding of user input in URLs. A successful exploit could allow an attacker to perform a phishing attack.
References
| Link | Resource |
|---|---|
| https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0025 | Vendor Advisory |
Configurations
History
24 Jun 2025, 01:21
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Mitel
Mitel micollab |
|
| References | () https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0025 - Vendor Advisory | |
| CPE | cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:* |
Information
Published : 2024-10-21 21:15
Updated : 2025-06-24 01:21
NVD link : CVE-2024-47224
Mitre link : CVE-2024-47224
CVE.ORG link : CVE-2024-47224
JSON object : View
Products Affected
mitel
- micollab
CWE
CWE-116
Improper Encoding or Escaping of Output