1 matches found
USN-8556-1 ruby2.3 vulnerabilities
It was discovered that the Net::IMAP client in Ruby did not properly sanitize Symbol arguments passed to IMAP commands. A remote attacker controlling a malicious IMAP server, or able to influence command arguments, could use this to inject arbitrary IMAP commands via CRLF sequences. CVE-2026-4225...
9.8CVSS8.7AI score0.01253EPSS
SaveExploits0References3
20