Description
SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remote attackers to execute arbitrary template expressions and potentially achieve remote code execution depending on the enabled template plugins.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SEPPmail | Secure Email Gateway | < 15.0.4 | 15.0.4 |