Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Mail Project Clear all filters
TI-2015-07486 CVE-2015-9097 · GHSA-q86f-fmqf-qrf6

The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP…

Priority LOW 33

The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and a…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03396 Published 2017-06-12 Partial fix · 2.5.5 CWE-93