CVE-2023-48381CWE-22

Softnext Mail SQR Expert - Local File Inclusion-1

Medium · published December 15, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
48.9
In the wild
Unconfirmed
What it is

Softnext Mail SQR Expert is an email management platform, it has a Local File Inclusion (LFI) vulnerability in a special URL. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00617 · 48.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-12-15T08:19Z
EPSS history
Timeline
  • 15 DEC 08:19Z
    Softnext Mail SQR Expert - Local File Inclusion-1
    cvelistv5