CVE-2022-31245

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction…

published May 20, 2022

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05521 · 92.8th percentile
Published
2022-05-20T14:20Z
EPSS history
Timeline
  • 20 MAY 14:20Z
    mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction…
    cvelistv5