CVE-2021-22848: Hgiga MSR45 Isherlock-Antispam

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege.

Affected products

• Hgiga MSR45 Isherlock-Antispam: before 4.5-133 (fixed in 4.5-133)
• Hgiga MSR45 Isherlock-User: before 4.5-120 (fixed in 4.5-120)
• Hgiga SSR45 Isherlock-Antispam: before 4.5-133 (fixed in 4.5-133)
• Hgiga SSR45 Isherlock-User: before 4.5-120 (fixed in 4.5-120)

Published 2021-03-18. Last modified 2026-06-17.