Vulnerability Details CVE-2020-25850
The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 61.7%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.0
References
Products affected by CVE-2020-25850
-
cpe:2.3:a:hgiga:msr45_isherlock-user:4.5-114
-
cpe:2.3:a:hgiga:msr45_isherlock-user:4.5-115
-
cpe:2.3:a:hgiga:msr45_isherlock-user:4.5-81
-
cpe:2.3:a:hgiga:ssr45_isherlock-user:4.5-114
-
cpe:2.3:a:hgiga:ssr45_isherlock-user:4.5-115