CVE-2023-48379mediumCWE-918

CVE-2023-48379: medium-severity vulnerability in Softnext Mail SQR Expert

Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)

Published · Updated

Follow this CVE+ Monitor Mail SQR Expert

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.6%
Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter within a specific function. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Softnext · Mail SQR Expert
Related CVEs — Softnext Mail SQR Expert

In the same product, most dangerous first.

CVE-2023-48378HIGHSoftnext Mail SQR Expert - Path Traversal EPSS 1.3%CVE-2023-48380HIGHSoftnext Mail SQR Expert - Command InjectionEPSS 0.7%CVE-2023-48382MEDIUMSoftnext Mail SQR Expert - Local File Inclusion-2EPSS 0.6%CVE-2023-48381MEDIUMSoftnext Mail SQR Expert - Local File Inclusion-1EPSS 0.6%