Icewarp Email Server 12.3.0.1 insecure_permissions

#https://nvd.nist.gov/vuln/detail/CVE-2020-14066

Introduction :

firs step: Login to account and upload malicious file via attachments menu.

second step: Click to download file and capture this request with burp suit.

third step: Send download link to victim.

forth step: Victim download malicious file from web server with out any authentication.