Skip to content

Vulnerabilities of Apache Software Foundation Apache SpamAssassin

Is your version affected?

CVE Summary Score Published
CVE-2020-1946 In Apache SpamAssassin before 3.4.5, malicious rule configuration (.cf) files can be configured to run system commands… Not rated Mar 25, 2021
CVE-2020-1930 A command execution issue was found in Apache SpamAssassin prior to 3.4.3 Not rated Jan 30, 2020
CVE-2020-1931 A command execution issue was found in Apache SpamAssassin prior to 3.4.3 Not rated Jan 30, 2020
CVE-2018-11781 Apache SpamAssassin 3.4.2 fixes a local user code injection in the meta rule syntax Not rated Sep 17, 2018
CVE-2018-11780 A potential Remote Code Execution bug exists with the PDFInfo plugin in Apache SpamAssassin before 3.4.2 Not rated Sep 17, 2018
CVE-2017-15705 A denial of service vulnerability was identified that exists in Apache SpamAssassin before 3.4.2 Not rated Sep 17, 2018

Other Apache Software Foundation products