exploitDog

CVE-2020-13376

Опубликовано: 07 авг. 2020

Источник: nvd

CVSS3: 9

CVSS2: 9.3

EPSS Низкий

Описание

SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie.

Ссылки

https://sidechannel.tempestsi.com/path-traversal-vulnerability-in-securenvoy-impacts-on-remote-command-execution-through-file-upload-ec2e731bd50a
Exploit
Third Party Advisory
https://www.securenvoy.com/en-gb/support
Vendor Advisory
https://sidechannel.tempestsi.com/path-traversal-vulnerability-in-securenvoy-impacts-on-remote-command-execution-through-file-upload-ec2e731bd50a
Exploit
Third Party Advisory
https://www.securenvoy.com/en-gb/support
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:securenvoy:securmail:9.3.503:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.0137

Низкий

9 Critical

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-33rv-x9gp-7cfh

github

больше 3 лет назад

SecurEnvoy SecurMail 9.3.503 allows attackers to upload executable files and achieve OS command execution via a crafted SecurEnvoyReply cookie.

EPSS

Процентиль: 80%

0.0137

Низкий

9 Critical

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-22