PT-2024-24312

CVE-2024-3195

Published

2024-04-28

Updated

2025-03-21

Description by

CVSS 3.1

7.2

High

MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MailCleaner versions up to 2023.03.14

Description A critical issue affects an unknown part of the component Admin Endpoints, leading to path traversal. The manipulation can be initiated remotely. The issue has been disclosed publicly and may be exploited.

Recommendations Apply a patch to fix this issue for versions up to 2023.03.14. As a temporary workaround, consider restricting access to the Admin Endpoints until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Michael Imfeld

Pascal Zenker

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Related identifiers