cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).

Published Aug 2, 2019 · Updated Aug 5, 2024 · Assigned by mitre