2 matches found
Updated trojita packages fix security vulnerability
Damian Poddebniak discovered a TLS verification failure in Trojitá. When sending e-mails over SMTP, all TLS errors were ignored CVE-2020-15047...
5.9CVSS3.5AI score0.00798EPSS
SaveExploits0References4
mail/trojita -- may leak mail contents (not user credentials) over unencrypted connection
Jan Kundrát reports: An SSL stripping vulnerability was discovered in Trojitá, a fast Qt IMAP e-mail client. User's credentials are never leaked, but if a user tries to send an e-mail, the automatic saving into the "sent" or "draft" folders could happen over a plaintext connection even if the...
4.3CVSS6.3AI score0.00981EPSS
SaveExploits1References1
20