CVE-2022-41871

Description

SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root.

PUBLISHED Reserved 2022-09-30 | Published 2025-04-28 | Updated 2025-04-28 | Assigner mitre

Problem types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Product status

References

www.seppmail.com/products/

code-white.com/public-vulnerability-list/

cve.org (CVE-2022-41871)

nvd.nist.gov (CVE-2022-41871)

Download JSON