Threats tagged 'ghsa-pg35-3wf2-cwx5'

mailcow: dockerized versions before 2026-11 contain a critical server-side template injection vulnerability. This flaw allows domain administrators to execute arbitrary commands within the shared rspamd container by storing a malicious domain-wide footer. Exploitation involves embedding a Jinja macro with an os.execute default value, which is rendered by the rspamd MOO_FOOTER prefilter. Successful attacks can lead to unauthorized reading or injection of mail for all tenants and disabling of mail filtering.