The vulnerability CVE-2024-50530 affects Myriad Solutionz Stars SMTP Mailer versions up to and including 2.2.1. It allows an attacker with low privileges to upload files without proper restrictions on file types, specifically enabling the upload of web shells. This can lead to remote code execution and full system compromise. The CVSS 3.1 base score is 9.9, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to upload a web shell to the web server hosting Stars SMTP Mailer, potentially resulting in full system compromise including data theft, modification, and service disruption. The vulnerability affects confidentiality, integrity, and availability at a critical level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload permissions and monitor for unauthorized file uploads as a temporary measure.