PatchTheCVE: replyonehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-48907: Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API.https://patchthecve.com/cve/CVE-2024-48907.htmlhttps://patchthecve.com/cve/CVE-2024-48907.htmlWed, 17 Jun 2026 07:59:00 +0000HIGH 7.5: Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API.CVE-2024-48906: Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name.https://patchthecve.com/cve/CVE-2024-48906.htmlhttps://patchthecve.com/cve/CVE-2024-48906.htmlWed, 17 Jun 2026 07:59:00 +0000MEDIUM 6.1: Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name.CVE-2024-48905: Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint.https://patchthecve.com/cve/CVE-2024-48905.htmlhttps://patchthecve.com/cve/CVE-2024-48905.htmlWed, 17 Jun 2026 07:59:00 +0000CRITICAL 9.1: Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint.