Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/05 12:00 a.m.•6 views

CVE-2025-61084: Improper Input Validation

MDaemon Mail Server 23.5.2 validates SPF, DKIM, and DMARC using the email enclosed in angle brackets in the From: header of SMTP DATA. An attacker can craft a From: header with multiple invisible Unicode thin spaces to display a spoofed sender while passing validation, allowing email spoofing eve...

7.1CVSS5.8AI score0.00244EPSS
SaveExploits0References1
Rows per page
Query Builder