Skip to content
OpenAdvisories

Vendor

0xdps

2 known vulnerabilities.

Products

emailflare 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-121730

    emailflare before commit cf31f33 Missing Authorization via Inbox Compose Endpoint

    emailflare before commit cf31f33 contains a missing authorization vulnerability in POST /api/inbox/compose that allows authenticated members to send mail as any sender address. Attackers can supply an arbitrary from field, which is passed unchecked to the Clo…

    0xdps emailflare