2023-10-17

EasyUse MailHunter Ultimate - Path Traversal

ZUSOART ID

ZA-2023-05

CVE ID

CVE-2023-34208

Vulnerability Type

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSS 4.0 Base

6.5

Description

Path Traversal in create template function of EasyUse MailHunter Ultimate 2023 and earlier allow remote authenticated users to extract files into arbitrary directories via a crafted ZIP archive.

Vendor

EasyUse Digital Technology

Product