Deutsche Post · Deutsche Post Mailoptimizer · CVE-2021-28042
Name of the Vulnerable Software and Affected Versions:
Deutsche Post Mailoptimizer versions prior to 2020-11-09
Description:
The issue allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component, potentially leading to remote code execution.
Recommendations:
For versions prior to 2020-11-09, update to a version released after 2020-11-09 to resolve the issue. As a temporary workaround, consider restricting access to the Upload feature and the MO Connect component to minimize the risk of exploitation.