CVE-2021-28042

ALTO 7.8CVE-2021-28042 · Published 05/03/2021 · updated 17/06/2026

In breve

CVE-2021-28042 è una vulnerabilità ALTO (CVSS 7.8) che riguarda mailoptimizer (deutschepost).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.4%, superiore al 89.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
mailoptimizer deutschepost	`= 4.3`	No fix yet

Description

Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.

References

herolab.usd.de/security-advisories/usd-2020-0028 · Third Party Advisory
deutschepost.de/de/m/mailoptimizer.html · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free