writeups.xyz / Re-moo-te Code Execution in Mailcow: Always Sanitize Error Messages

Submitter : c2a

Date: 17 June 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Path Traversal
• Arbitrary File Overwrite
• XSS
• Security Code Review

Programs :

• Mailcow

Authors :

• Paul Gerste

Link :
https://www.sonarsource.com/blog/remote-code-execution-in-mailcow-always-sanitize-error-messages/