Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-33515
4.8
MEDIUMCVSS v3
Published
June 28, 2021
CVSS v2
5.8 MEDIUM
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.
Crates.io
NPM
RubyGems