Lucene search
HistoryDec 15, 2023 - 8:15 a.m.
CVE-2023-48378
softnext mail sqr
path traversal
unauthenticated remote attacker
bypass authentication
download arbitrary system files
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
45.2%
Softnext Mail SQR Expert has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
Affected configurations
Node
softnextmail_sqr_expertRange≤230330
| Vendor | Product | Version | CPE |
|---|---|---|---|
| softnext | mail_sqr_expert | * | cpe:2.3:a:softnext:mail_sqr_expert:*:*:*:*:*:*:*:* |
Related
prion
prion
Path traversal
2023-12-15 08:15:00
cve
cve
CVE-2023-48378
2023-12-15 08:15:45
cvelist
cvelist
CVE-2023-48378 Softnext Mail SQR Expert - Path Traversal
2023-12-15 08:01:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
45.2%
Related for NVD:CVE-2023-48378