PT-2011-4977
CVE-2011-4542
·
تاريخ النشر
2011-11-30
·
تاريخ التحديث
2018-01-06
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Hastymail2 version 2.1.1 before RC2
Description
The issue allows remote attackers to execute arbitrary commands. This can be achieved via the
rs or rsargs[] parameter in a mailbox Drafts action to the default URI.Recommendations
For Hastymail2 version 2.1.1 before RC2, consider updating to RC2 or a later version to resolve the issue. As a temporary workaround, restrict access to the mailbox Drafts action and avoid using the
rs and rsargs[] parameters in the default URI until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾