Security Advisory

CVE-2022-35223

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-02 15:21:11
Last updated 2024-09-17 04:14:26
Assigner twcert
State PUBLISHED

Description

EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker to execute arbitrary code, manipulate system command or interrupt service.