CyberRota Analysis
AI-GeneratedGestSup versions prior to 3.2.61 are vulnerable to a remote code execution flaw in the IMAP connector, allowing unauthenticated attackers to exploit improperly handled attachments. By sending emails with PHP files to monitored mailboxes, attackers can execute malicious code when these files are accessed from the web. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
GestSup versions before 3.2.62 contain a remote code execution vulnerability in the basic IMAP connector's attachment handling that fails to skip blocked file extensions. Unauthenticated attackers can send emails with PHP attachments to monitored mailboxes, which are written to the web-accessible upload/ticket directory and executed when accessed.