Description
EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker to execute arbitrary code, manipulate system command or interrupt service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EasyUse | MailHunter Ultimate | unspecified – ≤ 2020 | — |