Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w28x-3vhc-vmmg

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-mail address, related to a "2nd Order SMTP Injection" issue.

One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-mail address, related to a "2nd Order SMTP Injection" issue.

EPSS

Процентиль: 60%
0.00391
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
около 14 лет назад

One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-mail address, related to a "2nd Order SMTP Injection" issue.

EPSS

Процентиль: 60%
0.00391
Низкий

Дефекты

CWE-20