CVE-2024-28441

A file upload vulnerability exists in magicflue (version 7.0 and earlier), allowing a remote attacker to execute arbitrary code by sending a crafted request to the messageid parameter of the mail/mailupdate.jsp endpoint. This vulnerability could allow an attacker to gain control over the affected...