CVE-2020-11879

An issue was discovered in GNOME Evolution before 3.35.91

published April 17, 2020

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or other source of mailto links) can make Evolution attach local files or directories to a composed email message without showing a warning to the user, as demonstrated by an attach=. value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02761 · 86.2th percentile
Published
2020-04-17T17:07Z
EPSS history
Timeline
  • 17 APR 17:07Z
    An issue was discovered in GNOME Evolution before 3.35.91
    cvelistv5