Skip to content
OpenAdvisories
High · 7.5 CVE-2023-48378 EUVD-2023-52430GHSA-pwmr-6x4v-frjm

Softnext Mail SQR Expert - Path Traversal

Published Dec 15, 2023 · Updated Oct 8, 2024 · Assigned by twcert

Description

Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.

Affected products

VendorProductAffectedFixed
Softnext Mail SQR Expert – ≤ 230330 —

References