Lucene search
+L

1 matches found

OSV
OSV
added 2021/07/12 5:03 p.m.45 views

GHSA-QC36-Q22Q-CJW3 SMTP command injection in lettre

Impact Affected versions of lettre allowed SMTP command injection through an attacker's controlled message body. The module for escaping lines starting with a period wouldn't catch a period that was placed after a double CRLF sequence, allowing the attacker to end the current message and write...

9.8CVSS9.7AI score0.01494EPSS
SaveExploits1References5
Rows per page
Query Builder