CVE-2018-15668

An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...

CVE-2018-15667: Improper Authentication

An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction on who can use it...

PT-2018-13129

Name of the Vulnerable Software and Affected Versions Bloop Airmail 3 version 3.5.9 Description An issue in the "send" command of the airmail:// URL scheme allows external applications to send arbitrary emails from an active account without user prompt. The command accepts URL parameters with the...

CVE-2018-15668: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment" prefix designate attachment parameters. If the...