high7.5
CVE-2023-48378
Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL.
Impact
Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softnext | Mail Sqr Expert | through 230330 |