CVE-2016-1000282
CVE-2016-1000282
Vexday Risk Score
23Low
SSVC decision (CISA)
Attend
PoC available → attend closely
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 13.4%KEV nãoPoC —Nuclei —Metasploit simPatch —
Lifecycle
26 Jan 2017Metasploit module available
05 Feb 2019Published on NVD
Recommendation: Plan a near-term fix — a public PoC already exists.
Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.
Affected products
n/a · n/a