medium6.0

CVE-2022-41871

SEPPmail through 12.1.17 allows command injection within the Admin Portal.

Impact

SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root.

Affected products

Vendor	Product	Affected versions
Seppmail	Seppmail	through 12.1.17

Weakness classification

CWE-78

References

NVD record
CVE.org record
https://code-white.com/public-vulnerability-list/
https://www.seppmail.com/products/