CVE-2021-27182

HIGH 8.8CVE-2021-27182 · Published 14/04/2021 · updated 17/06/2026

In short

CVE-2021-27182 is a HIGH (CVSS 8.8) vulnerability affecting mdaemon (altn).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.2% of all vulnerabilities.
Fix: update to 20.0.4 or later.

Package	Affected versions	Patched versions
mdaemon altn	`< 20.0.4`	`20.0.4`

Description

An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user.

References

chudyPB/MDaemon-Advisories · Exploit
altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN · Release Notes

More vulnerabilities in mdaemon

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mdaemon

altn

< 20.0.4

20.0.4

More vulnerabilities in mdaemon

See all →