Critical severity vulnerability that affects Haraka

严重 9.8CVE-2016-1000282 · GHSA-w5m8-5v9m-xhx5 · Published 05/02/2019 · updated 17/06/2026

要点

CVE-2016-1000282 是影响 haraka (haraka project), Haraka 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：13.5%，高于 96.4% 的漏洞。
修复：升级到 2.8.9 或更高版本。

Package	Affected versions	Patched versions
haraka haraka_project	`≤ 2.8.8`	No fix yet
Haraka npm	`< 2.8.9`	`2.8.9`

Description

Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.

NVD description

Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.

References

nvd.nist.gov/vuln/detail/CVE-2016-1000282 · ADVISORY
GitHub Advisory GHSA-w5m8-5v9m-xhx5 · ADVISORY
outflanknl/Exploits · WEB

haraka 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free