cbcvebase.
CVE-2024-3191
published 2024-04-29

CVE-2024-3191: A vulnerability, which was classified as critical, has been found in MailCleaner up to 2023.03.14. This issue affects some unknown processing of the component…

PriorityP266critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
5.15%
91.4th percentile
A vulnerability, which was classified as critical, has been found in MailCleaner up to 2023.03.14. This issue affects some unknown processing of the component Email Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-262307.

Affected

16 ranges
VendorProductVersion rangeFixed in
mailcleanermailcleaner<= 2023.03.14—
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——
mailcleanermailcleaner——

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.