CVE-2021-29281: Gfi Archiver

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317.

Affected products

• Gfi Archiver: before 15.2 (fixed in 15.2)

Published 2022-07-07. Last modified 2026-06-17.