Vulnerabilities

TI-2012-01913 CVE-2012-2140 · GHSA-rp63-jfmw-532w

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands…

MEDIUM 40

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04466 Published 2012-07-18 Partial fix · 2.4.3 CWE-20

TI-2012-01912 CVE-2012-2139 · GHSA-cj92-c4fj-w9c5

Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb…

LOW 31

Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04923 Published 2012-07-18 Partial fix · 2.4.4 CWE-22

Vulnerabilities

Filters

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands…

Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb…