5.5
CVE-2011-4554
- EPSS 0.39%
- Veröffentlicht 06.12.2011 11:55:07
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginOne Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characters in an org name or (2) " (double quote) characters in an e-mail address, related to a "2nd Order SMTP Injection" issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oneclickorgs ≫ One Click Orgs Version <= 1.2.2
Oneclickorgs ≫ One Click Orgs Version1.0.0
Oneclickorgs ≫ One Click Orgs Version1.0.1
Oneclickorgs ≫ One Click Orgs Version1.1.0
Oneclickorgs ≫ One Click Orgs Version1.1.1
Oneclickorgs ≫ One Click Orgs Version1.2.0
Oneclickorgs ≫ One Click Orgs Version1.2.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.39% | 0.572 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 8 | 4.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.