1 matches found
USN-8556-1 ruby2.3 vulnerabilities
It was discovered that the Net::IMAP client in Ruby did not properly sanitize Symbol arguments passed to IMAP commands. A remote attacker controlling a malicious IMAP server, or able to influence command arguments, could use this to inject arbitrary IMAP commands via CRLF sequences. CVE-2026-4225...
9.8CVSS6.3AI score0.00783EPSS
SaveExploits0References3
20