EXIM exploits actively used

[sahsanu]

CVE-2023-42115 | Exim Vulnerability (CVSS score 9.8)

Given Hestia’s reliance on Exim, I’d like to bring to your attention a current vulnerability (CVE-2023-42115) with CVSS score 9.8 that could potentially lead to remote code execution. Unfortunately, there is currently no patch available for this issue. As a temporary solution, we can mitigate the risk by blocking port 25 through the firewall page (iptables) in the HestiaCP panel. It’s important to note that this action will prevent the reception of emails for all email accounts. However, email s…