Lucene search
+L

5 matches found

OSV
OSV
added 2026/02/14 6:30 a.m.8 views

GHSA-RFQ9-4WCM-64GH ImapEngine affected by command injection via the ID command parameters

Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' via the id function in ImapConnection.php due to improperly escaping user input before including it in IMAP ID commands...

7.6CVSS5.6AI score0.00351EPSS
SaveExploits0References6
Rows per page
Query Builder