mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-12 21:42:20 +02:00
734 B
734 B
CVE-2021-28042
Description
Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.
POC
Reference
- https://herolab.usd.de/security-advisories/usd-2020-0028/
- https://herolab.usd.de/security-advisories/usd-2020-0028/
Github
No PoCs found on GitHub currently.