Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-03-05T21:43:59
Updated: 2024-08-03T21:33:17.415Z
Reserved: 2021-03-05T00:00:00
Link: CVE-2021-28042
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-03-05T22:15:12.473
Modified: 2021-03-09T15:55:38.293
Link: CVE-2021-28042
Redhat
No data.