Multiple critical vulnerabilities in MailCleaner versions before 2023.03.14 allow attackers to gain control of the appliance through various means like malicious emails, SOAP endpoints, and admin privileges, enabling arbitrary command execution and complete system compromise, posing a significant risk to confidentiality and integrity, especially in cluster deployments
Attackers can intercept and manipulate emails, exploit command injection flaws, execute XSS attacks for session hijacking, data theft, and unauthorized actions, ultimately leading to potential system compromise and unauthorized access. ```https://cybersecuritynews.com/critical-mailcleaner-vulnerabilities/