CVE-2021-33515

The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp

published June 28, 2021

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp. Sensitive information can be redirected to an attacker-controlled address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02850 · 86.6th percentile
Published
2021-06-28T12:04Z
EPSS history
Timeline
  • 28 JUN 12:04Z
    The submission service in Dovecot before 2.3.15 allows STARTTLS command injection in lib-smtp
    cvelistv5