CVE-2024-7208: CVE-2024-7208

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-07-30 · updated 2026-06-17

Description

A vulnerability in multi-tenant hosting allows an authenticated sender to spoof the identity of a shared, hosted domain, thus bypass security measures provided by DMARC (or SPF or DKIM) policies.

Affected products

HostGator: Current

References

https://kb.cert.org/vuls/id/244112
https://kb.cert.org/vuls/id/244112
https://www.kb.cert.org/vuls/id/244112

Get alerted when CVE-2024-7208 or the next vulnerability affects your stack