TI-2024-18879 CVE-2024-28441 · GHSA-rxj8-fv7g-cp4vFile Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to…Priority HIGH 76File Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the messageid parameter of the mail/mailupdate.jsp endpoint.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01234 · Published 2024-03-22 · No fix listed CWE-434