Title:IceWarp Mail Server 输入验证错误漏洞 (CVE-2023-40779) Description:IceWarp Mail Server是捷克爱思华宝(IceWarp)公司的一款邮件服务器产品。该产品支持电子邮件归档、SmartAttach附件、自动迁移等。 IceWarp Mail Server Deep Castle 2 v.13.0.1.2版本存在安全漏洞,该漏洞源于允许远程攻击者通过精心设计的 URL 请求执行任意代码。
Description
An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL.
File Snapshot
id: CVE-2023-40779
info:
name: IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect
aut
...
Shenlong Bot has cached this for you
Remarks
1. It is advised to access via the original source first.2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.