Skip to content
Threat Feed
Subscribe

Tag

Smtp-Injection

2 briefs RSS
high advisory

Nodemailer SSRF and Arbitrary File Read Vulnerability

Nodemailer versions before 9.0.1 fail to enforce security flags when processing message-level raw options, allowing authenticated attackers to perform SSRF and read arbitrary files.

nodemailer +1 vulnerability ssrf file-access smtp-injection
3t 1c
medium advisory

Shibboleth Identity Provider Vulnerabilities Leading to SMTP Injection and Denial of Service

Multiple vulnerabilities in Shibboleth Identity Provider allow an attacker to perform SMTP injection or cause a denial of service.

Identity Provider vulnerability denial-of-service smtp-injection
1r 1t