PT-2024-14546
CVE-2023-52354
·
تاريخ النشر
2024-01-21
·
تاريخ التحديث
2024-06-28
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
chasquid versions prior to 1.13
Description
The issue allows SMTP smuggling because LF-terminated lines are accepted. This can be exploited through the SMTP protocol, potentially allowing an attacker to manipulate email messages.
Recommendations
For versions prior to 1.13, update to version 1.13 or later to resolve the issue. As a temporary workaround, consider restricting the acceptance of LF-terminated lines in SMTP communications until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾