CVE-2021-20247

The CVE-2021-20247 issue affects isync/mbsync before v1.3.5 and v1.4.1. The root cause is that validations of mailbox names returned by IMAP LIST/LSUB do not occur, allowing a malicious or compromised IMAP server to craft mailbox names with .. components to access data outside the intended mailbo...