| Package | Affected versions | Patched versions |
|---|---|---|
| mailsweeper | = 4.3.6_sp1 |
Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-mail attachment filtering policies via an attachment that MAILsweeper can detect but not remove.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free