Unknown · Transmitmail · CVE-2022-21193
**Name of the Vulnerable Software and Affected Versions**
TransmitMail versions 2.5.0 through 2.6.1
**Description**
The issue allows a remote unauthenticated attacker to obtain an arbitrary file on the server via unspecified vectors. This is a directory traversal vulnerability.
**Recommendations**
For TransmitMail versions 2.5.0 through 2.6.1, consider restricting access to sensitive files on the server until a patch is available.
As a temporary workaround, limit the ability of the server to retrieve arbitrary files.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.