Vendor
postalsys
2 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 5.3
postal-mime < 4.2.1 Algorithmic Complexity DoS via processLine
postal-mime before 4.2.1 contains an algorithmic complexity denial of service vulnerability that allows unauthenticated remote attackers to cause excessive CPU consumption in the PostalMime.processLine() function by crafting deeply nested multipart email mess…
-
Medium 5.9
postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncation
postal-mime before 4.2.1 contains a parser differential vulnerability in its address parser that truncates the domain at folding whitespace or comments preceding a dot. Remote attackers can craft From headers that pass SPF/DKIM/DMARC alignment for their own s…