PT-2019-19393

Name of the Vulnerable Software and Affected Versions Mailvelope versions prior to 3.3.0 Description The issue allows private key operations without user interaction via its client-API. An attacker can modify a URL parameter in Mailvelope to sign and encrypt arbitrary messages, assuming the priva...