CVE-2020-25850
HGiga MailSherlock - Arbitrary File Download
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.1EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
31 Dec 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
HGiga · MailSherlock MSR45/SSR45Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →