Vulnerabilities (CVE)

Filtered by vendor Endymion Subscribe
Filtered by product Sake Mail
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0418 1 Endymion 1 Sake Mail 2024-02-04 5.0 MEDIUM N/A
Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.