IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14066
Reference (s):
- https://github.com/networksecure/icewarp_insecure_permissions
- https://www.icewarp.com/download-premise/server/