Priority HIGH 77
parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size.
No domainaware vulnerabilities are listed in CISA KEV.
2 records
parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompressed output size.
parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject.