Back to Database
Status published
Medium
CVE-2024-23824
mailcow ipixel flood attack leads to Denial of Service in admin page
Vulnerability Description
mailcow is a dockerized email package, with multiple containers linked in one bridged network. The application is vulnerable to pixel flood attack, once the payload has been successfully uploaded in the logo the application goes slow and doesn't respond in the admin page. It is tested on the versions 2023-12a and prior and patched in version 2024-01.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-23824
Credits & Attribution
No credits recorded in the NVD database.
References
More from mailcow
View All →CVE-2025-53909
mailcow: dockerized vulnerable to SSTI in Quota and Quarantine Notification Template
Critical
9.1
CVE-2025-25198
mailcow: dockerized vulnerable to password reset poisoning
High
7.1
CVE-2024-41960
Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized
Low
3.8
CVE-2024-41959
Cross-site Scripting (XSS) via API Logs in mailcow: dockerized
High
7.6
CVE-2024-41958
Two-Factor Authentication (2FA) Bypass in mailcow: dockerized
Medium
6.6
Affected Vendor
mailcow
View all reports →Affected Software
mailcow-dockerized
Vulnerable Versions:
< 2024-01
Timeline
Official Publish:
February 2nd, 2024
Last Modified:
June 17th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L