1 matches found
Open-Xchange: SSRF - Guard - Unchecked HKP servers
Description When encrypting an email, one of strategies to lookup recipient's encryption key is to contact a HKP keyserver specified in DNS records of recipient's domain. Specifically it is DNS SRV records for hkps.tcp. and hkp.tcp., which specify hostname and port of the keyserver. In source cod...
0.7AI score
SaveExploits0
20