Code injection

2021-08-1015:15:00

PRIOn knowledge base

www.prio-n.com

4.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.3%

In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS.

CPENameOperatorVersion
trojitaeq0.7

CPE	Name	Operator	Version
	trojita	eq	0.7

References

bugs.kde.org/show_bug.cgi?id=432353

nostarttls.secvuln.info