Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-40779 PoC — IceWarp Mail Server 输入验证错误漏洞

Source
Associated Vulnerability
Title:IceWarp Mail Server 输入验证错误漏洞 (CVE-2023-40779)
Description:IceWarp Mail Server是捷克爱思华宝(IceWarp)公司的一款邮件服务器产品。该产品支持电子邮件归档、SmartAttach附件、自动迁移等。 IceWarp Mail Server Deep Castle 2 v.13.0.1.2版本存在安全漏洞,该漏洞源于允许远程攻击者通过精心设计的 URL 请求执行任意代码。
Description
An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL.
File Snapshot

id: CVE-2023-40779 info: name: IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect aut ...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.