Search for packages
| purl | pkg:gem/mail@2.4.3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-f4sz-rqp7-6ydb
Aliases: CVE-2012-2140 GHSA-rp63-jfmw-532w OSV-81632 |
Improper Input Validation The Mail gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery. | There are no reported fixed by versions. |
|
VCID-pgqp-64zv-8fc3
Aliases: CVE-2015-9097 GHSA-q86f-fmqf-qrf6 OSV-131677 |
SMTP Injection via to/from addresses The mail package does not disallow CRLF in email addresses; an attacker can inject SMTP commands in specially crafted email addresses passed to `RCPT TO` and `MAIL FROM`. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-q6zt-ft1w-8ka1
Aliases: CVE-2012-2139 GHSA-cj92-c4fj-w9c5 OSV-81631 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-f4sz-rqp7-6ydb | Improper Input Validation The Mail gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery. |
CVE-2012-2140
GHSA-rp63-jfmw-532w OSV-81632 |