IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access.
No PoCs from references.
- https://github.com/0xT11/CVE-POC
- https://github.com/ARPSyndicate/cvemon
- https://github.com/developer3000S/PoC-in-GitHub
- https://github.com/hectorgie/PoC-in-GitHub
- https://github.com/masoud-zivari/CVE-2020-14066
- https://github.com/networksecure/CVE-2020-14066
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/pinpinsec/CVE-2020-14066
- https://github.com/pinpinsec/Icewarp-Email-Server-12.3.0.1-insecure_permissions
- https://github.com/soosmile/POC