Researchers at SonarCloud have discovered critical security vulnerabilities in Mailcow, a popular open-source email server solution, that could have allowed attackers to execute malicious code on vulnerable systems “with a single email viewed by an admin.” Here are the details of the two issues that reportedly, have existed for over three years and affect Mailcow versions before 2024-04.  XSS (Cross-Site Scripting) via Exception Handler (CVE-2024-31204):  The first issue involved Mailcow’s exception-handling mechanism.

Source: HackRead