CVE-2020-12272

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail…

published April 27, 2020

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsing and interpretation of SPF/DKIM authentication results, as demonstrated by the example.net(.example.com substring.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02208 · 82.4th percentile
Published
2020-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail…
    cvelistv5