CyberRota Analysis
AI-GeneratedThe Thales CERT "Suspicious" application versions up to 1.3.4 are vulnerable to remote, unauthenticated code execution, allowing attackers to overwrite critical application files such as Python modules and configuration settings. This could result in persistent denial of service, exposure of sensitive application secrets, and potential root-level access within the Django application container. Organizations using this application should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated attacker to execute arbitrary code and arbitrarily overwrite writable application files—including Python modules, configuration files, cron inputs, and runtime artifacts—leading to a persistent denial of service, the potential compromise of application secrets or integrations, and root-level execution inside the Django application container. This vulnerability has been names "Matryoshka Mail". Thales PSIRT acknowledges and thanks Lucien Doustaly (aka wlayzz) for discovering and reporting this issue.