PT-2025-43231
CVE-2025-52740
·
Published
2025-08-05
·
Updated
2026-10-05
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Boldermail versions through 2.4.0
Description
A flaw exists in Boldermail that allows for Object Injection due to deserialization of untrusted data. This issue impacts Boldermail and could potentially allow an attacker to execute arbitrary code.
Recommendations
Update Boldermail to a version newer than 2.4.0.
Found an issue in the description? Have something to add? Feel free to write us 👾