HGiga MailSherlock - Command Injection

CVE-2023-24841

What is CVE-2023-24841?

HGiga MailSherlock contains a vulnerability in its query function used for connection logs, which lacks sufficient filtering of user input. This weakness can be exploited by an authenticated attacker possessing administrator permissions to inject arbitrary commands. The exploit allows for potential disruption of services or unauthorized execution of system operations, leading to significant security concerns for affected systems.

References