mailcow kayıtları
mailcow üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %12,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
37İzleyin | CVE-2022-31245Kavram kanıtı | mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug optmailcow · mailcow\ · CWE-78 | Yüksek8,8 | — | %5,5 | 20 May 2022 |
36İzleyin | CVE-2022-31138Kavram kanıtı | OS Command Injection in mailcowmailcow · mailcow\ · CWE-78 | Yüksek8,8 | — | %3,2 | 11 Tem 2022 |
36İzleyin | CVE-2023-26490İstismar yok | mailcow is vulnerable to shell command injection via xoauth2 authentication in imapsyncmailcow · mailcow\ · CWE-78 | Yüksek8,8 | — | %2,2 | 3 Mar 2023 |
36İzleyin | CVE-2017-8928Kavram kanıtı | mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.mailcow · mailcow\ · CWE-352 | Yüksek8,8 | — | %2,0 | 14 May 2017 |
35İzleyin | CVE-2025-25198Kavram kanıtı | mailcow: dockerized vulnerable to password reset poisoningmailcow · mailcow\ · CWE-601 | Yüksek8,8 | — | %1,1 | 12 Şub 2025 |
35İzleyin | CVE-2023-34108İstismar yok | Manipulation of Internal Dovecot Variables in mailcow via crafted Passwordsmailcow · mailcow\ · CWE-78 | Yüksek8,8 | — | %0,9 | 7 Haz 2023 |
33İzleyin | CVE-2022-39258Kavram kanıtı | mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UImailcow · mailcow\ · CWE-200 | Yüksek8,2 | — | %1,8 | 27 Eyl 2022 |
32İzleyin | CVE-2024-30270Kavram kanıtı | mailcow Path Traversal and Arbitrary Code Execution Vulnerabilitymailcow · mailcow\ · CWE-22 | Orta6,2 | — | %27,3 | 4 Nis 2024 |
29İzleyin | CVE-2024-24760Kavram kanıtı | Mailcow Docker Container Exposure to Local Networkmailcow · mailcow\ · CWE-610 | Yüksek7,3 | — | %0,8 | 2 Şub 2024 |
28İzleyin | CVE-2024-41958Kavram kanıtı | Two-Factor Authentication (2FA) Bypass in mailcow: dockerizedmailcow · mailcow\ · CWE-697 | Yüksek7,2 | — | %1,0 | 5 Ağu 2024 |
28İzleyin | CVE-2025-53909İstismar yok | mailcow: dockerized vulnerable to SSTI in Quota and Quarantine Notification Templatemailcow · mailcow\ · CWE-1336 | Yüksek7,2 | — | %0,5 | 17 Tem 2025 |
26İzleyin | CVE-2024-31204İstismar yok | mailcow Cross-site Scripting Vulnerability via Exception Handlermailcow · mailcow\ · CWE-79 | Orta6,1 | — | %8,2 | 4 Nis 2024 |
24İzleyin | CVE-2023-49077İstismar yok | mailcow-dockerized XSS Vulnerability in Quarantine UI Allows Unauthorized Access and Data Manipulationmailcow · mailcow\ · CWE-79 | Orta6,1 | — | %0,4 | 30 Kas 2023 |
24İzleyin | CVE-2024-41959İstismar yok | Cross-site Scripting (XSS) via API Logs in mailcow: dockerizedmailcow · mailcow\ · CWE-79 | Orta6,1 | — | %0,3 | 5 Ağu 2024 |
19İzleyin | CVE-2024-41960İstismar yok | Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerizedmailcow · mailcow\ · CWE-79 | Orta4,8 | — | %0,3 | 5 Ağu 2024 |
10İzleyin | CVE-2024-23824İstismar yok | mailcow ipixel flood attack leads to Denial of Service in admin pagemailcow · mailcow\ · CWE-400 | Düşük2,7 | — | %0,5 | 2 Şub 2024 |
- CVE-2022-3124537İzleyin
mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug opt
YüksekCVSS 8,8Kavram kanıtıEPSS %5mailcow · mailcow\20 May 2022
- CVE-2022-3113836İzleyin
OS Command Injection in mailcow
YüksekCVSS 8,8Kavram kanıtıEPSS %3mailcow · mailcow\11 Tem 2022
- CVE-2023-2649036İzleyin
mailcow is vulnerable to shell command injection via xoauth2 authentication in imapsync
YüksekCVSS 8,8İstismar yokEPSS %2mailcow · mailcow\3 Mar 2023
- CVE-2017-892836İzleyin
mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.
YüksekCVSS 8,8Kavram kanıtıEPSS %2mailcow · mailcow\14 May 2017
- CVE-2025-2519835İzleyin
mailcow: dockerized vulnerable to password reset poisoning
YüksekCVSS 8,8Kavram kanıtıEPSS %1mailcow · mailcow\12 Şub 2025
- CVE-2023-3410835İzleyin
Manipulation of Internal Dovecot Variables in mailcow via crafted Passwords
YüksekCVSS 8,8İstismar yokEPSS %0mailcow · mailcow\7 Haz 2023
- CVE-2022-3925833İzleyin
mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI
YüksekCVSS 8,2Kavram kanıtıEPSS %1mailcow · mailcow\27 Eyl 2022
- CVE-2024-3027032İzleyin
mailcow Path Traversal and Arbitrary Code Execution Vulnerability
OrtaCVSS 6,2Kavram kanıtıEPSS %27mailcow · mailcow\4 Nis 2024
- CVE-2024-2476029İzleyin
Mailcow Docker Container Exposure to Local Network
YüksekCVSS 7,3Kavram kanıtıEPSS %0mailcow · mailcow\2 Şub 2024
- CVE-2024-4195828İzleyin
Two-Factor Authentication (2FA) Bypass in mailcow: dockerized
YüksekCVSS 7,2Kavram kanıtıEPSS %1mailcow · mailcow\5 Ağu 2024
- CVE-2025-5390928İzleyin
mailcow: dockerized vulnerable to SSTI in Quota and Quarantine Notification Template
YüksekCVSS 7,2İstismar yokEPSS %0mailcow · mailcow\17 Tem 2025
- CVE-2024-3120426İzleyin
mailcow Cross-site Scripting Vulnerability via Exception Handler
OrtaCVSS 6,1İstismar yokEPSS %8mailcow · mailcow\4 Nis 2024
- CVE-2023-4907724İzleyin
mailcow-dockerized XSS Vulnerability in Quarantine UI Allows Unauthorized Access and Data Manipulation
OrtaCVSS 6,1İstismar yokEPSS %0mailcow · mailcow\30 Kas 2023
- CVE-2024-4195924İzleyin
Cross-site Scripting (XSS) via API Logs in mailcow: dockerized
OrtaCVSS 6,1İstismar yokEPSS %0mailcow · mailcow\5 Ağu 2024
- CVE-2024-4196019İzleyin
Cross-site Scripting (XSS) via Relay Hosts Configuration in mailcow: dockerized
OrtaCVSS 4,8İstismar yokEPSS %0mailcow · mailcow\5 Ağu 2024
- CVE-2024-2382410İzleyin
mailcow ipixel flood attack leads to Denial of Service in admin page
DüşükCVSS 2,7İstismar yokEPSS %0mailcow · mailcow\2 Şub 2024