9.8
Critical
CVE-2024-3191 A vulnerability, which was classified as critical, has been found in MailCleaner up to 2023.03.14
Description
A vulnerability, which was classified as critical, has been found in MailCleaner up to 2023.03.14. This issue affects some unknown processing of the component Email Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-262307.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MailCleaner 2023.03 | 2023.03.0 → 2023.03.14 | No fix stated |
| MailCleaner 2023.03 | 2023.03.0 → 2023.03.14 | No fix stated |
Other CVEs of MailCleaner
The 5 CVEs of MailCleaner →
CVE-2024-55560
MailCleaner before 28d913e has default values of ssh_host_dsa_key, ssh_host_rsa_key, and ssh_host_ed25519_key that…
9.8
Critical
CVE-2024-3196
A vulnerability was found in MailCleaner up to 2023.03.14
6.7
Medium
CVE-2024-3195
A vulnerability was found in MailCleaner up to 2023.03.14
4.7
Medium
CVE-2019-1010246
MailCleaner before c888fbb6aaa7c5f8400f637bcf1cbb844de46cd9 is affected by: Unauthenticated MySQL database password…
Not rated