Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-48380

Опубликовано: 15 дек. 2023
Источник: nvd
CVSS3: 7.4
CVSS3: 8
EPSS Низкий

Описание

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:softnext:mail_sqr_expert:*:*:*:*:*:*:*:*
Версия до 230330 (исключая)

EPSS

Процентиль: 53%
0.00306
Низкий

7.4 High

CVSS3

8 High

CVSS3

Дефекты

CWE-78
CWE-78

Связанные уязвимости

CVSS3: 7.4
github
около 2 лет назад

Softnext Mail SQR Expert is an email management platform, it has insufficient filtering for a special character within a spcific function. A remote attacker authenticated as a localhost can exploit this vulnerability to perform command injection attacks, to execute arbitrary system command, manipulate system or disrupt service.

EPSS

Процентиль: 53%
0.00306
Низкий

7.4 High

CVSS3

8 High

CVSS3

Дефекты

CWE-78
CWE-78