Mailcow-CVE-2022-31245

Mailcow CVE-2022-31245 CVE-2022-31245：针对 Mailcow 的 RCE 和 Domain Admin 权限提升。包含 POC。 报告并修复：2022-05 已修复版本：https://github.com/mailcow/mailcow-dockerized/releases/tag/2022-05d CVE：https://vulners.com/cve/CVE-2022-31245 CVE-2022-31245：命令注入，RCE 严重性：3/3 类型：命令注入、RCE、域接管 受影响版本：至少 2019 - 2022-05c 最近的所有...

CVE-2022-31245

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs...

Exploit for OS Command Injection in Mailcow Mailcow\:_Dockerized

Mailcow CVE-2022-31138 RCE and Domain Admin privilege escalat...

CVE-2022-31245

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs...

Design/Logic Flaw

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs...

CVE-2022-31245

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs...

CVE-2022-31245

mailcow before 2022-05d allows a remote authenticated user to inject OS commands and escalate privileges to domain admin via the --debug option in conjunction with the ---PIPEMESS option in Sync Jobs...