medium5.3
CVE-2023-48379
Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function.
Impact
Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softnext | Mail Sqr Expert | through 230330 |