4 matches found
SUSE CVE-2017-17843
An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, because incorrect regular expressions are used for extraction of an e-mail address from a comma-separated list, as demonstrated by a modified Full Name field and ...
CVE-2022-35924
NextAuth.js is a complete open source authentication solution for Next.js applications. "next-auth" users who are using the "EmailProvider" either in versions before "4.10.3" or "3.29.10" are affected. If an attacker could forge a request that sent a comma-separated list of emails eg.:...
UBUNTU-CVE-2017-17843
An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, because incorrect regular expressions are used for extraction of an e-mail address from a comma-separated list, as demonstrated by a modified Full Name field and ...
