p PatchFirst

CVE-2016-1000282

CVE-2016-1000282

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.

CVSS 9.8 · Critical · EPSS 13.5% · Public exploit · Fix available

Published
Updated

Stack: node

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • haraka npm

    Affected ranges
    • SEMVER: < 2.8.9

    Update to 2.8.9

Original sources

Check your server →