CVE-2024-38462: Untrusted Search Path

iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cppL94-L106 reference...

PT-2024-28018 · Irods · Irods

Name of the Vulnerable Software and Affected Versions: iRODS versions prior to 4.3.2 Description: The issue concerns a problematic dependency on the mail binary in the msiSendMail function. This function is referenced in mailMS.cppL94-L106. Recommendations: For versions prior to 4.3.2, update to...