CVE-2021-28042

Publication date

2021-03-05 21:43:59

Family

mitre

State

PUBLISHED

Description

Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution.