CVE-2023-48382

Summary

CVE-2023-48382 is a Local File Inclusion (LFI) vulnerability affecting Softnext Mail SQR Expert, an email management platform. An attacker can exploit this unauthenticated weakness in a mail deliver-related URL to execute arbitrary PHP files with the .asp extension under specific system paths. This vulnerability grants partial system information access but does not impact the service's availability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.