Mailpit v1.30.0 Security Patch: DoS, SSRF via Internal IP, Path Traversal, Race Condition

Vulnerability Overview This version (v1.30.0) includes critical security fixes, and an upgrade is strongly recommended. The primary security issues addressed are: 1. Default Message Size Limit: A default 50MB message size limit is set for SMTP and to prevent denial-of-service (DoS) attacks via unlimited message sizes. 2. Internal IP Check: Internal IP checks are now included in Carrier-Grade NAT (CGNAT) environments. 3. Internal IP Access in HTML Checks: Internal IP access is blocked by default. 4. Path Traversal and Arbitrary File Write: Fixed path traversal and arbitrary file write vulnerabilities in caused by attacker-controlled mail IDs. 5. Concurrent Map Read/Write: Fixed concurrent map read/write issues in the proxy CSS rewriter. Impact Scope DoS Attacks: Denial-of-service attacks facilitated by unlimited message sizes. Internal IP Access: Access to internal IPs within CGNAT and during HTML checks. Path Traversal and File Write: Path traversal and arbitrary file write vulnerabilities triggered by attacker-controlled mail IDs. Concurrent Map Read/Write: Concurrent map read/write race conditions in the proxy CSS rewriter. Remediation 1. Set Default Message Size Limit: - Configure a default 50MB message size limit for SMTP and . 2. Internal IP Checks: - Implement internal IP checks for CGNAT environments. - Block internal IP access by default. 3. Path Traversal and File Write: - Resolve path traversal and arbitrary file write issues associated with attacker-controlled mail IDs. 4. Concurrent Map Read/Write: - Fix concurrent map read/write issues in the proxy CSS rewriter. Code Snippets No specific POC code or exploit code is included on this page. Summary Version v1.30.0 contains several important security fixes. Users are advised to upgrade as soon as possible to mitigate potential security risks. The remediation measures include setting default message size limits, implementing internal IP checks, fixing path traversal and arbitrary file write vulnerabilities, and resolving concurrent map read/write issues.

Goal Reached Thanks to every supporter — we hit 100%!

Mailpit v1.30.0 Security Patch: DoS, SSRF via Internal IP, Path Traversal, Race Condition

More from this source