CVE-2022-39258

CVE-2022-39258 is a high-severity vulnerability affecting mailcow mail server suites prior to the 2022-09 update. An unauthenticated attacker can craft a malicious Swagger API template to redirect victims to attacker-controlled sites, potentially leading to the theft of Swagger authorization credentials or other sensitive information through phishing. The vulnerability has a CVSS score of 8.2 (HIGH) due to its network-based attack vector, low complexity, and high impact on confidentiality. While there is no evidence of active exploitation, public exploit code, or significant community discussion, affected organizations should apply the 2022-09 mailcow Mootember Update or remove the Swagger API Documentation as a workaround.