Lucene search

K
cvelistMitreCVELIST:CVE-2015-9096
HistoryJun 12, 2017 - 8:00 p.m.

CVE-2015-9096

2017-06-1220:00:00
mitre
www.cve.org
7

AI Score

8

Confidence

High

EPSS

0.003

Percentile

71.6%

Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.