CVE-2023-39416

HIGH

Proself <=5.61/1.62/1.07 Authenticated OS Command Injection

Title source: llm
STIX 2.1

Description

Proself Enterprise/Standard Edition Ver5.61 and earlier, Proself Gateway Edition Ver1.62 and earlier, and Proself Mail Sanitize Edition Ver1.07 and earlier allow a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands.

References (3)

Core 3

Scores

CVSS v3 7.2
EPSS 0.0087
EPSS Percentile 54.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Products (3)
northgrid/proself < 1.07
northgrid/proself < 1.62
northgrid/proself < 5.61 (2 CPE variants)
Published Aug 18, 2023
Tracked Since Feb 18, 2026