3 matches found
Command injection in nodemailer
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...
9.8CVSS9.4AI score0.02316EPSS
SaveExploits1References8Affected Software1
CVE-2020-7769
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...
9.8CVSS9.6AI score0.02316EPSS
SaveExploits1References4
CVE-2020-7769 Command Injection
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails...
8.6CVSS9.8AI score0.02316EPSS
SaveExploits1References4
20