CVE-2024-30270: mailcow Path Traversal and Arbitrary Code Execution Vulnerability
mailcow: dockerized is an open source groupware/email suite based on docker. A security vulnerability has been identified in mailcow affecting versions prior to 2024-04. This vulnerability is a combination of path traversal and arbitrary code execution, specifically targeting the rspamdmaps() function. It allows authenticated admin users to overwrite any file writable by the www-data user by exploiting improper path validation. The exploit chain can lead to the execution of arbitrary commands on the server. Version 2024-04 contains a patch for the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
mailcow: dockerizedto a version that resolves this vulnerability.Fixed in 2024-04
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30270?
CVE-2024-30270 is considered a critical vulnerability due to its potential for path traversal and arbitrary code execution.
How do I fix CVE-2024-30270?
To fix CVE-2024-30270, update mailcow: dockerized to version 2024-04 or later.
What versions of mailcow are affected by CVE-2024-30270?
CVE-2024-30270 affects all versions of mailcow: dockerized prior to 2024-04.
What types of attacks can be carried out using CVE-2024-30270?
CVE-2024-30270 allows attackers to perform arbitrary code execution and path traversal attacks.
Is there a workaround for CVE-2024-30270?
There are no recommended workarounds for CVE-2024-30270 other than upgrading to the latest version.