← CVE Intelligence

CVE-2024-4296

HGiga iSherlock - Arbitrary File Download PUBLISHED

Description (CNA)

The account management interface of HGiga iSherlock (including MailSherlock, SpamSherlock, AuditSherlock) fails to filter special characters in certain function parameters, allowing remote attackers with administrative privileges to exploit this vulnerability to download arbitrary system files.

Affected (CNA)

Vendor / productVersions
HGiga / iSherlock 4.5affected earlier before 149
HGiga / iSherlock 5.5affected earlier before 149

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.