CVE-2021-28042

Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component

published March 5, 2021

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03429 · 88.9th percentile
Published
2021-03-05T21:43Z
EPSS history
Timeline
  • 05 MAR 21:43Z
    Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component
    cvelistv5