Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-49394

Опубликовано: 12 нояб. 2024
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mutt:mutt:-:*:*:*:*:*:*:*
cpe:2.3:a:neomutt:neomutt:-:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.00325
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 2 года назад

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

CVSS3: 5.3
redhat
около 2 лет назад

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

CVSS3: 5.3
debian
почти 2 года назад

In mutt and neomutt the In-Reply-To email header field is not protecte ...

CVSS3: 5.3
github
почти 2 года назад

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

CVSS3: 6.5
altlinux
почти 2 года назад

ALT-PU-2024-17105: package `neomutt` update to version 20241212-alt1

EPSS

Процентиль: 26%
0.00325
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-347