Directory Traversal Vulnerability in IceWarp Webclient Affects User Data

CVE-2010-5335

What is CVE-2010-5335?

The IceWarp Webclient prior to version 10.2.1 is vulnerable to directory traversal attacks. An attacker can exploit this vulnerability by passing unvalidated input through a specific parameter. This flaw may allow unauthorized users to access sensitive files on the server, potentially leading to the exposure of confidential information stored on the IceWarp Mailserver and the underlying operating system. Proper input sanitization measures are critical to mitigate this risk and protect user data.

References