CVE-2025-52372

Published July 21st, 2025

View on NVD ↗

CVSS v3

5.1

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

An issue in hMailServer v.5.8.6 allows a local attacker to obtain sensitive information via the hmailserver/installation/hMailServerInnoExtension.iss and hMailServer.ini components.

hmailserver/hmailserver

GitHub

993

mojibake-dev/hMailEnum

Proof of Concept for 3 Vulnerabilities in how hMailServer handles various credentials

GitHub

mojibake-dev/mojibake-CVE

Quick reference for my discovered CVE advisories

GitHub