CVE-2023-6381

MEDIUM 5.5CVE-2023-6381 · Published 13/12/2023 · updated 17/06/2026

In short

CVE-2023-6381 is a MEDIUM (CVSS 5.5) vulnerability affecting supermailer (supermailer).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
supermailer supermailer	`= 11.20.0.2204`	No fix yet

Description

Improper input validation vulnerability in Newsletter Software SuperMailer affecting version 11.20.0.2204. An attacker could exploit this vulnerability by sending a malicious configuration file (file with SMB extension) to a user via a link or email attachment and persuade the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to crash the application when attempting to load the malicious file.

References

incibe.es/en/incibe-cert/notices/aviso/improper-input-validation-newsletter-software-supermailer · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free