CVE-2018-20954

2019-08-0821:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.5%

JSON

The “Security and Privacy” Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.

CPENameOperatorVersion
mailpileeq0.5.2
mailpileeqGunsmoke--TheLastApacheTag
mailpileeq1.0.0rc2
mailpileeq1.0.0rc0
mailpileeq1.0.0rc1
mailpileeq0.3.1
mailpileeq0.4.0
mailpileeq0.5.1
mailpileeq0.4.3
mailpileeq0.5.0

Name	Operator	Version
mailpile	eq	0.5.2
mailpile	eq	Gunsmoke--TheLastApacheTag
mailpile	eq	1.0.0rc2
mailpile	eq	1.0.0rc0
mailpile	eq	1.0.0rc1
mailpile	eq	0.3.1
mailpile	eq	0.4.0
mailpile	eq	0.5.1
mailpile	eq	0.4.3
mailpile	eq	0.5.0