| Package | Affected versions | Patched versions |
|---|---|---|
| smartermail | ≥ 16.0.6345, < 16.3.6985 | 16.3.6985 |
SmarterTools SmarterMail 16.x before build 6985 has hardcoded secret keys. An unauthenticated attacker could access other users’ emails and file attachments. It was also possible to interact with mailing lists.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free