Read the docs

Mime Mail Module Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mime Mail Module Project records in CISA KEV

No Mime Mail Module Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mimemail 1 record LOW

Records

1 record in Mimemail · all components

TI-2012-03837 CVE-2012-4495 · GHSA-qg6j-cgpv-37w6

The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access…

Priority LOW 21

The Mime Mail module 6.x-1.x before 6.x-1.1 for Drupal does not properly restrict access to files outside Drupal's publish files directory, which allows remote authenticated users to send arbitrary files as attachments.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.012 Published 2012-10-31 No fix listed CWE-264
Open these records in search →