CVE-2020-25850

—

CVSS 3.1

7.5 high

EPSS

1%p64

Published

Dec 31, 2020 (Dec 31, 2020)

Modified

Jun 17, 2026

Description

The function, view the source code, of HGiga MailSherlock does not validate specific characters. Remote attackers can use this flaw to download arbitrary system files.

Vendors: hgiga
Products: msr45 isherlock-user, ssr45 isherlock-user
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.