Lucene search

K
osvGoogleOSV:GHSA-W5M8-5V9M-XHX5
HistoryFeb 12, 2019 - 5:26 p.m.

Critical severity vulnerability that affects Haraka

2019-02-1217:26:10
Google
osv.dev
36

0.008 Low

EPSS

Percentile

81.2%

Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection.

CPENameOperatorVersion
harakalt2.8.9

0.008 Low

EPSS

Percentile

81.2%