Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GFI MailEssentials < 21.8 MultiNode Insecure Deserialization
Vulnerability Description
GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET when joining to a Multi-Server setup.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
可信数据的反序列化
Vulnerability Title
GFI MailEssentials 安全漏洞
Vulnerability Description
GFI MailEssentials是GFI公司的一款电子邮件安全套装，包含 14 个反垃圾邮件过滤器、3 个防病毒引擎以及恶意软件扫描功能。 GFI MailEssentials 21.8之前版本存在安全漏洞，该漏洞源于.NET反序列化处理不当，可能导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A