Vulnerability Details CVE-2020-25850
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.4%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.0
References
Products affected by CVE-2020-25850
-
cpe:2.3:a:hgiga:msr45_isherlock-user:4.5-114
-
cpe:2.3:a:hgiga:msr45_isherlock-user:4.5-115
-
cpe:2.3:a:hgiga:msr45_isherlock-user:4.5-81
-
cpe:2.3:a:hgiga:ssr45_isherlock-user:4.5-114
-
cpe:2.3:a:hgiga:ssr45_isherlock-user:4.5-115