GHSA-fv57-985w-x39v
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unauthenticated Path Traversal vulnerability exists in the /public/loader.php file. The path parameter does not properly filter whether the file and directory passed are part of the webroot, allowing an attacker to read arbitrary files on the server.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: July 27, 2025 6:21 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.