CVE-2024-3196 | MailCleaner up to 2023.03.14 SOAP Service getStats os command injection (MZ-24-01)

A vulnerability was found in MailCleaner up to 2023.03.14. It has been declared as critical. This vulnerability affects unknown code of the file /mailcleaner.php/getStats of the component SOAP Service. The manipulation leads to os command injection.

This vulnerability was named CVE-2024-3196. Local access is required to approach this attack. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.