CVE-2019-7213: Path Traversal
SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new folders in arbitrary locations on the mail server. This could lead to command execution on the server for instance by putting files inside the web directories.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2019-7213?
CVE-2019-7213 is a vulnerability in SmarterTools SmarterMail 16.x before build 6985 that allows directory traversal, enabling an authenticated user to delete arbitrary files or create files in new folders in arbitrary locations on the mail server.
What is the severity of CVE-2019-7213?
The severity of CVE-2019-7213 is medium, with a severity value of 6.5.
How does CVE-2019-7213 impact the server?
CVE-2019-7213 can lead to command execution on the server by allowing an attacker to put files inside the web root folder.
How can an attacker exploit CVE-2019-7213?
An attacker can exploit CVE-2019-7213 by exploiting the directory traversal vulnerability to delete files or create files in arbitrary locations on the mail server.
How can I mitigate CVE-2019-7213?
To mitigate CVE-2019-7213, update SmarterTools SmarterMail to build 6985 or later to fix the directory traversal vulnerability.