Softnext Mail SQR Expert - Path Traversal

CVE-2023-48378

What is CVE-2023-48378?

Softnext Mail SQR Expert contains a path traversal vulnerability that permits remote attackers to access restricted files on the server. This flaw can be exploited by providing specially crafted parameters in specific URLs, allowing unauthorized users to bypass authentication mechanisms and download arbitrary system files. Attackers could potentially harvest sensitive information or execute malicious actions, highlighting the importance of securing web applications against such vulnerabilities.

References