CVE-2020-12736

Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creates a local non-SSO user via a Code42-generated email, the administrator has the option to modify content for the email invitation. If the administrator enter...

CVE-2020-12736

CVE-2020-12736 affects Code42 on-premises servers (versions 7.0.4 and earlier). The issue arises when an administrator creates a local (non-SSO) user via a Code42-generated invitation email and includes template language in the subject line; the email generation service may interpret that code, l...