Unrestricted upload of file with dangerous type...
High severity
Unreviewed
Published
Oct 17, 2023
to the GitHub Advisory Database
•
Updated Apr 4, 2024
Description
Published by the National Vulnerability Database
Oct 17, 2023
Published to the GitHub Advisory Database
Oct 17, 2023
Last updated
Apr 4, 2024
Unrestricted upload of file with dangerous type vulnerability in create template function in EasyUse MailHunter Ultimate 2023 and earlier allows remote authenticated users to perform arbitrary system commands with ‘NT Authority\SYSTEM‘ privilege via a crafted ZIP archive.
References