CVE-2019-7213: SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new…

PriorityP351medium6.5CVSS 3.0

AVNACLPRLUINSUCNIHAN

EPSS

42.11%

98.5th percentile

SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
smartertools	smartermail	>= 16.0.6345 < 16.3.6985	16.3.6985

CVSS provenance

nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.