Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hchw-xwhf-3qvm

Опубликовано: 12 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.

EPSS

Процентиль: 19%
0.00061
Низкий

7.4 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 1 года назад

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.

CVSS3: 6.5
redhat
около 1 года назад

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.

CVSS3: 6.5
nvd
около 1 года назад

In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.

CVSS3: 6.5
debian
около 1 года назад

In neomutt and mutt, the To and Cc email headers are not validated by ...

CVSS3: 7.4
fstec
больше 1 года назад

Уязвимость почтовых клиентов Mutt и NeoMutt, связанная с ошибками проверки криптографической подписи, позволяющая нарушителю изменить список доверенных получателей и раскрыть защищаемую информацию

EPSS

Процентиль: 19%
0.00061
Низкий

7.4 High

CVSS3

Дефекты

CWE-347