CyberRota Analysis
AI-GeneratedKiteworks Email Protection Gateway versions prior to 9.5.0 are susceptible to a path traversal vulnerability in the administrative import function, enabling authenticated administrators to write files to arbitrary locations on the server. This flaw could be exploited to execute arbitrary code, posing a significant risk to system integrity. Organizations using affected versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the server. This could potentially be leveraged to execute arbitrary code on the underlying system.