Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-47r3-rvvm-8c7f

Опубликовано: 28 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstream email client, the malicious attachment could cause partial loss of integrity and confidentiality to their system.

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstream email client, the malicious attachment could cause partial loss of integrity and confidentiality to their system.

EPSS

Процентиль: 16%
0.0005
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-20
CWE-754

Связанные уязвимости

CVSS3: 6.1
nvd
9 месяцев назад

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending a malicious S/MIME attachment with an opaque signature. When opened by a recipient in a downstream email client, the malicious attachment could cause partial loss of integrity and confidentiality to their system.

EPSS

Процентиль: 16%
0.0005
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-20
CWE-754