CVE-2023-35169

The CVE-2023-35169 issue affects PHP-IMAP (Webklex/php-imap) up to version 5.2.x when attachments are saved via Attachment::save(path, filename) without a sanitized or provided filename. This enables a directory traversal in unsanitized attachment filenames, allowing unauthenticated attackers to ...