📦

mail

Vendor: mail_project

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 17 Total Indexed
Avg. EPSS 3.40% Exploit Prob.
Latest CVE CVE-2015-9097 Jun 12

Security Vulnerability Index

Page 1 / 2
6.1 CVSS
CVE-2015-9097
RCE

The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.

EPSS: 3.40%