PT-2024-24293

CVE-2024-3193

Published

2024-04-28

Updated

2025-03-21

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions MailCleaner versions up to 2023.03.14

Description A critical issue has been found in the Admin Endpoints component of MailCleaner, affecting an unknown functionality. This issue leads to os command injection, allowing remote attacks. The exploit for this issue has been disclosed publicly.

Recommendations For MailCleaner versions up to 2023.03.14, apply a patch to fix this issue. As a temporary workaround, consider restricting access to the Admin Endpoints component until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Michael Imfeld

Pascal Zenker

Vendors

Affected products

Weakness enumeration

CWE-78: Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\')

Related identifiers