Medium · 5.1 CVE-2025-52372 EUVD-2025-22115GHSA-39qh-9h7v-m3w8

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExt…

Published Jul 21, 2025 · Updated Jul 22, 2025 · Assigned by mitre

Description

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components.

References

https://github.com/mojibake-dev/hMailEnum
https://github.com/hmailserver/hmailserver
https://github.com/mojibake-dev/mojibake-CVE/blob/main/hMailServer/CVE-2025-52372.md