Lucene search
+L

698 matches found

NVD
NVD
added 2024/10/16 9:15 p.m.16 views

CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS0.00937EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/16 9:15 p.m.4 views

DEBIAN-CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/16 9:15 p.m.12 views

UBUNTU-CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS6.4AI score0.00937EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2024/10/16 8:55 p.m.30 views

CVE-2024-47889

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/10/16 8:55 p.m.12 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS6.8AI score0.00937EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/10/16 8:55 p.m.36 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS0.00937EPSS
SaveExploits0References5
CVE
CVE
added 2024/10/16 8:55 p.m.95 views

CVE-2024-47889

CVE-2024-47889 – Action Mailer ReDoS (Rails) : Action Mailer’s block_format helper is vulnerable to a ReDoS (regular-expression denial of service) in affected releases. Text crafted to trigger pathological regex handling can cause unusually long processing times, yielding a DoS. Affected Rails re...

8.7CVSS6.5AI score0.00937EPSS
SaveExploits0References5
OSV
OSV
added 2024/10/16 8:55 p.m.22 views

CVE-2024-47889 Action Mailer has possible ReDoS vulnerability in block_format

Action Mailer is a framework for designing email service layers. Starting in version 3.0.0 and prior to versions 6.1.7.9, 7.0.8.5, 7.1.4.1, and 7.2.1.1, there is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. Carefully crafted text can cause the blockformat helper to...

8.7CVSS5.2AI score0.00937EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2024/10/15 11:35 p.m.24 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS9.3AI score0.00937EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/10/15 11:35 p.m.23 views

GHSA-H47H-MWP9-C6Q6 Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS5.3AI score0.00937EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/15 12:0 a.m.10 views

PT-2024-7931

Name of the Vulnerable Software and Affected Versions Action Mailer versions 3.0.0 through 6.1.7.8 Action Mailer versions 7.0.0 through 7.0.8.4 Action Mailer versions 7.1.0 through 7.1.4.0 Action Mailer versions 7.2.0 through 7.2.1.0 Description The issue is related to the block format helper in...

9.8CVSS6.2AI score0.0246EPSS
SaveExploits5References86
RubySec
RubySec
added 2024/10/15 12:0 a.m.19 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS vulnerabilit...

8.7CVSS6.9AI score0.00937EPSS
SaveExploits0References1Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2024/10/15 12:0 a.m.30 views

Possible ReDoS vulnerability in block_format in Action Mailer

There is a possible ReDoS vulnerability in the blockformat helper in Action Mailer. This vulnerability has been assigned the CVE identifier CVE-2024-47889. Impact ------ Carefully crafted text can cause the blockformat helper to take an unexpected amount of time, possibly resulting in a DoS...

8.7CVSS9.3AI score0.00937EPSS
SaveExploits0References5Affected Software1
OpenVAS
OpenVAS
added 2024/08/14 12:0 a.m.16 views

WordPress Post SMTP Mailer/Email Log Plugin < 2.8.8 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpexperts:postsmtp"; ifdescription...

7.2CVSS6.1AI score0.00941EPSS
SaveExploits2References1
OpenVAS
OpenVAS
added 2024/08/14 12:0 a.m.25 views

WordPress Post SMTP Mailer/Email Log Plugin < 2.8.7 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wpexperts:postsmtp"; ifdescription...

9.8CVSS6.7AI score0.90339EPSS
SaveExploits10References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:45 p.m.5 views

Malicious code in action-mailer_cache_delivery (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/11 4:5 p.m.15 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS7AI score0.00367EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/06/11 4:5 p.m.29 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS0.00367EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/11 4:5 p.m.94 views

CVE-2023-52233

The CVE-2023-52233 entry concerns the WordPress plugin Post SMTP Mailer/Email Log (versions n/a–2.8.6). The authenticated note in Patchstack indicates a Missing Authorization/ Broken Access Control on the API, exploitable by an unauthenticated actor. Affects the plugin’s API surface, allowing una...

9.8CVSS9.1AI score0.00367EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/06/11 4:5 p.m.8 views

CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability

Missing Authorization vulnerability in Post SMTP Post SMTP Mailer/Email Log.This issue affects Post SMTP Mailer/Email Log: from n/a through 2.8.6...

8.6CVSS5.9AI score0.00367EPSS
SaveExploits0References4
Rows per page
Query Builder