Lucene search

K
cvelistMitreCVELIST:CVE-2023-51766
HistoryDec 24, 2023 - 12:00 a.m.

CVE-2023-51766

2023-12-2400:00:00
mitre
raw.githubusercontent.com
2
exim
smtp smuggling
spoofed email

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%

Exim before 4.97.1 allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, allowing bypass of an SPF protection mechanism. This occurs because Exim supports <LF>.<CR><LF> but some other popular e-mail servers do not.

6.1 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%