SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

摘要

SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub API method. This could allow the attacker to point the SmarterMail instance to a malicious HTTP server which serves the malicious OS command and could lead to command execution.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。