Aller au contenu
en Se connecter
5.8 Moyenne

CVE-2026-42257 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby

Description

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, several Net::IMAP commands accept a raw string argument that is sent to the server without validation or escaping. If this string is derived from user-controlled input, it may contain contain CRLF sequences, which an attacker can use to inject arbitrary IMAP commands. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.

Produits et versions touchés

Produit Versions touchées Corrigé en
net-imap 0.6 0.6.0 → < 0.6.4 0.6.4
net-imap 0.5 0.5.0 → < 0.5.14 0.5.14
net-imap 0.4 premières → < 0.4.24 0.4.24

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de net-imap

Les 10 CVE de net-imap →
CVE-2026-47242 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 5.8 Moyenne CVE-2026-47240 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 5.8 Moyenne CVE-2026-47241 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 2.1 Faible CVE-2026-42258 Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby 5.8 Moyenne
Suivre cette CVE