Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2024/03/01 9:31 p.m.21 views

CVE-2023-51747

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to...

7.4CVSS6.3AI score0.00243EPSS
Exploits0References3
Veracode
Veracode
added 2024/02/28 12:16 p.m.15 views

SMTP Smuggling

Apache James is vulnerable to SMTP Smuggling. The vulnerability is due to the lenient behavior in line delimiter handling which creates a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to bypas...

7.1CVSS7AI score0.00243EPSS
Exploits0References6Affected Software1
Github Security Blog
Github Security Blog
added 2024/02/27 3:30 p.m.27 views

SMTP smuggling in Apache James

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to...

7.1CVSS7AI score0.00243EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2024/02/27 3:30 p.m.12 views

GHSA-P5Q9-86W4-2XR5 SMTP smuggling in Apache James

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to...

7.1CVSS6.8AI score0.00243EPSS
Exploits0References8
NVD
NVD
added 2024/02/27 2:15 p.m.16 views

CVE-2023-51747

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to...

7.1CVSS6.3AI score0.00243EPSS
Exploits0References4
Prion
Prion
added 2024/02/27 2:15 p.m.19 views

Design/Logic Flaw

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to...

7AI score0.00243EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/02/27 1:8 p.m.17 views

CVE-2023-51747 SMTP smuggling in Apache James

Apache James prior to versions 3.8.1 and 3.7.5 is vulnerable to SMTP smuggling. A lenient behaviour in line delimiter handling might create a difference of interpretation between the sender and the receiver which can be exploited by an attacker to forge an SMTP envelop, allowing for instance to...

6.8AI score0.00243EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2023/12/25 10:30 p.m.62 views

CVE-2023-51765

A flaw was found in some SMTP server configurations in Sendmail. This issue may allow a remote attacker to break out of the email message data to "smuggle" SMTP commands and send spoofed emails that pass SPF checks. Mitigation Mitigation for this issue is either not available or the currently...

5.3CVSS5AI score0.00837EPSS
Exploits2References4
RedhatCVE
RedhatCVE
added 2023/12/25 10:0 p.m.64 views

CVE-2023-51764

A flaw was found in some SMTP server configurations in Postfix. This flaw allows a remote attacker to break out email message data to "smuggle" SMTP commands and send spoofed emails that pass SPF checks. Out of the box, Postfix targets to accommodate older clients with faulty SMTP implementations...

5.3CVSS5.2AI score0.2846EPSS
Exploits4References5
Kitploit
Kitploit
added 2016/10/20 2:30 p.m.25 views

King Phisher 1.5.2 - Phishing Campaign Toolkit

King Phisher is a tool for testing and promoting user awareness by simulating real world phishing attacks. It features an easy to use, yet very flexible architecture allowing full control over both emails and server content. King Phisher can be used to run campaigns ranging from simple awareness...

7.5AI score
Exploits0References8
Rows per page
Query Builder