CVE-2020-13163

em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is not verified...

CVE-2020-13163

CVE-2020-13163 affects em-imap (v0.5 and earlier) where TLS server certificate hostname verification is not performed due to insecure use of the EventMachine library, enabling potential MITM attacks. The available connected sources consistently describe the vulnerability in basic terms and refere...