Description
MailGates/MailAudit developed by Openfind has a CRLF Injection vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read system files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Openfind | MailGates | 6.0 – < 6.1.10.054, 5.0 – < 5.2.10.099 | 6.1.10.054 |
| Openfind | MailAudit | 6.0 – < 6.1.10.054, 5.0 – < 5.2.10.099 | 6.1.10.054 |
References
- https://www.twcert.org.tw/tw/cp-132-10844-1405d-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-10843-9ff91-2.html third-party-advisory