CVE-2013-5035
Severity CVSS v4.0:
Pending analysis
Type:
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Publication date:
05/09/2013
Last modified:
11/04/2025
Description
Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other products, allow remote authenticated users to read the private e-mail of other persons in opportunistic circumstances by leveraging lack of thread safety and performing a rapid series of (1) mail-sending or (2) draft-saving operations.
Impact
Base Score 2.0
4.90
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:*:*:*:*:*:*:*:* | 2.5 (including) | |
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:0.8:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:0.9:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.0.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.12:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.13:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:1.55:*:*:*:*:*:*:* | ||
| cpe:2.3:a:htmlcleaner_project:htmlcleaner:2.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page