SmarterMail vulnerabilities
7 known vulnerabilities in SmarterMail from SmarterTools. 7 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access…
SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the account's current role when redeemed through POST /api/v1/auth/refresh-token. Att
- 7.2 High severity
Smartermail: Improper Control of Generation of Code
SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-directory containment control by provisioning a new mail domain with an arbitrary File
- 8.8 High severity
SmarterMail: Improper Limitation of a Pathname to a Restricted Directory
SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /api/v1/report/summary/{type} API endpoint that allows authenticated users to read arbitrary .json files on the system. Attackers can exploit this vulnerability c
- 9.1 Critical severity
SmarterMail: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
SmarterTools SmarterMail builds prior to 9610 contain a cryptographic weakness in the file and email sharing endpoints that use DES-CBC encryption with keys and initialization vectors derived from System.Random seeded with insufficient entropy, reducing the se
- 9.8 Critical severity
SmarterTools SmarterMail Missing Authentication for Critical Function Exploited
SmarterTools SmarterMail versions prior to build 9511 contain an unauthenticated remote code execution vulnerability in the ConnectToHub API method. The attacker could point the SmarterMail to the malicious HTTP server, which serves the malicious OS command. T
- 9.8 Critical severity
SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Exploited
SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetti
- 10.0 Critical severity
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Exploited
Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution.