NuytsTech Security

CVE-2022-31245

by ·

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the –debug option in conjunction with the —PIPEMESS option in Sync Jobs.

Date published : 2022-05-20

https://github.com/ly1g3/Mailcow-CVE-2022-31245

https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d

Tags: