Product
An unauthenticated API endpoint in SCBE-AETHERMOORE AetherBrowser allows remote attackers to trigger the execution of a subprocess that retrieves and exposes operator email metadata from IMAP accounts.