Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-48379

Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Softnext Mail SQR Expert

Default version status: unaffected

  • to ≤ 230330affected

References