Description
SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's eval.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SEPPmail | Secure Email Gateway | < 15.0.2.1 | 15.0.2.1 |