Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-324f-35v9-jxhh

Опубликовано: 16 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenticated but non-admin user could invoke the admin-only LOCALDELETE IMAP command and delete mailboxes for which they had no permissions.

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenticated but non-admin user could invoke the admin-only LOCALDELETE IMAP command and delete mailboxes for which they had no permissions.

EPSS

Процентиль: 12%
0.00214
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 6.5
ubuntu
21 день назад

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenticated but non-admin user could invoke the admin-only LOCALDELETE IMAP command and delete mailboxes for which they had no permissions.

CVSS3: 6.5
redhat
22 дня назад

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenticated but non-admin user could invoke the admin-only LOCALDELETE IMAP command and delete mailboxes for which they had no permissions.

CVSS3: 6.5
nvd
21 день назад

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The LOCALDELETE command bypassed ACL checks. An authenticated but non-admin user could invoke the admin-only LOCALDELETE IMAP command and delete mailboxes for which they had no permissions.

CVSS3: 6.5
debian
21 день назад

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. T ...

suse-cvrf
20 дней назад

Security update for cyrus-imapd

EPSS

Процентиль: 12%
0.00214
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-863