Lucene search
+L

1 matches found

OSV
OSV
added 2021/05/22 12:0 p.m.42 views

RUSTSEC-2021-0069 SMTP command injection in body

Affected versions of lettre allowed SMTP command injection through an attacker's controlled message body. The module for escaping lines starting with a period wouldn't catch a period that was placed after a double CRLF sequence, allowing the attacker to end the current message and write arbitrary...

9.8CVSS9.7AI score0.01494EPSS
SaveExploits1References3
Rows per page
Query Builder