Lucene search

Ubuntu.comUB:CVE-2020-24904

HistoryAug 11, 2023 - 12:00 a.m.

CVE-2020-24904

2023-08-1100:00:00

ubuntu.com

vulnerability

gnome gmail

remote attackers

information disclosure

mailto link

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

43.4%

JSON

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4,
allows remote attackers to gain sensitive information via crafted “mailto”
link.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1051726>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchgnome-gmail< anyUNKNOWN
ubuntu20.04noarchgnome-gmail< anyUNKNOWN
ubuntu22.04noarchgnome-gmail< anyUNKNOWN
ubuntu16.04noarchgnome-gmail< anyUNKNOWN
ubuntu23.10noarchviagee< anyUNKNOWN
ubuntu24.04noarchviagee< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	gnome-gmail	< any	UNKNOWN
ubuntu	20.04	noarch	gnome-gmail	< any	UNKNOWN
ubuntu	22.04	noarch	gnome-gmail	< any	UNKNOWN
ubuntu	16.04	noarch	gnome-gmail	< any	UNKNOWN
ubuntu	23.10	noarch	viagee	< any	UNKNOWN
ubuntu	24.04	noarch	viagee	< any	UNKNOWN

References

github.com/davesteele/gnome-gmail/issues/84

github.com/davesteele/viagee/commit/c961b7431018976abc9c964ce594b371fb84183e

launchpad.net/bugs/cve/CVE-2020-24904

nvd.nist.gov/vuln/detail/CVE-2020-24904

security-tracker.debian.org/tracker/CVE-2020-24904

www.cve.org/CVERecord?id=CVE-2020-24904

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

43.4%

JSON

Related for UB:CVE-2020-24904