CVE-2025-5323: Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking

A vulnerability, which was classified as problematic, has been found in fossasia open-event-server 1.19.1. This issue affects the function sendemailchangeuseremail of the file /fossasia/open-event-server/blob/development/app/api/helpers/mail.py of the component Mail Verification Handler. The...

PT-2019-18674

Name of the Vulnerable Software and Affected Versions Pagure version 5.2 Description The issue allows for the leakage of API keys via email, which can be intercepted by man-in-the-middle attackers due to the lack of TLS certificate validation on many email servers. This can lead to unauthorized...