Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2021-28042

Description

Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.

POC

Reference

- https://herolab.usd.de/security-advisories/usd-2020-0028/

Github

No PoCs found on GitHub currently.