We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2022-22793

Cybonet - PineApp Mail Relay Local File Inclusion



AssignerINCD
Reserved2022-01-07
Published2022-02-24
Updated2024-09-16

Description

Cybonet - PineApp Mail Relay Local File Inclusion. Attacker can send a request to : /manage/mailpolicymtm/log/eml_viewer/email.content.body.php?filesystem_path=ENCDODED PATH and by doing that, the attacker can read Local Files inside the server.



MEDIUM: 6.1CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H

Product status

PineApp Latest
affected

Credits

Dudu Moyal - Sophtix Security LTD

References

https://www.gov.il/en/departments/faq/cve_advisories

cve.org CVE-2022-22793

nvd.nist.gov CVE-2022-22793

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2022-22793
Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.