← Back

Magicflue

magicflue

Vendor: Magicflue • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-28441
1Magicflue
1Magicflue
Jun 17, 2026
Mar 22, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
File Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the messageid parameter of the mail/mailupdate.jsp endpoint.