CVE-2019-7213

SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories.

CVSS v3.0

6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0

5.5 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

41.51% chance of exploitation in the next 30 days, 99th percentile

Published

2019-04-24

Updated

2024-08-04

Proof-of-concept exploits (1)

• secunnix/CVE-2019-72131★ · 2022-09-11

References

• CVE Record
• NVD entry

Related

• CVE-2022-40684
• CVE-2024-27398
• CVE-2024-27518
• CVE-2024-29895
• CVE-2024-36424
• CVE-2019-7195