CVE-2022-41871

Description

SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root.

Reserved 2022-09-30 | Published 2025-04-28 | Updated 2025-04-28 | Assigner mitre

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

Default status
unknown

12.1.17
affected

References

www.seppmail.com/products/

code-white.com/public-vulnerability-list/

cve.org (CVE-2022-41871)

nvd.nist.gov (CVE-2022-41871)

Download JSON