CVE-2021-32234

SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.

CVE	CVE-2021-32234
Title	SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.
Credits	Discovered by Wietse Boonstra of DIVD (finder) Victor Pasman of DIVD (analyst)
Affected products	Product Affected Unaffected Unknown SmarterTools Smartermail >= 16.x to < 100.0.7803 (custom)
CVSS
References	https://www.smartertools.com/smartermail/release-notes/current ( x_refsource_MISC ) https://csirt.divd.nl/DIVD-2021-00006/ ( third-party-advisory ) https://csirt.divd.nl/CVE-2021-32234/ ( third-party-advisory )
Problem type(s)	CWE-94 Improper Control of Generation of Code ('Code Injection')
Date published
Last modified	26 Jul 2024 00:00 UTC

Description

---

JSON version.