Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2026/11/10 9:28 p.m.•3 views

GHSA-5957-C7QM-M469 Action Mailbox: Possible signature replay in Action Mailbox Mailgun ingress

Impact The Action Mailbox Mailgun ingress authenticates a request with an HMAC of the timestamp and token parameters concatenated without a separator, and ActionMailbox::Ingresses::Mailgun::InboundEmailsController::Authenticatorrecent? rejects only timestamps more than 2 minutes in the past...

3.7CVSS6.1AI score
SaveExploits0References7
Rows per page
Query Builder