CVE-2021-28042

CVE-2021-28042 is a directory traversal vulnerability affecting Deutsche Post Mailoptimizer 4.3 prior to the 2020-11-09 update. An unauthenticated attacker can exploit this by uploading a specially crafted ZIP archive through the Upload feature or MO Connect component, potentially leading to remote code execution. This vulnerability has a CVSS score of 7.8 (High), indicating a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability, though it requires user interaction. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.