Publish GHSA-q86f-fmqf-qrf6

This commit is contained in:
advisory-database[bot]
2023-09-05 21:09:57 +00:00
parent 3f2c41d13e
commit 6e37b24c6c
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q86f-fmqf-qrf6",
"modified": "2023-01-23T21:32:22Z",
"modified": "2023-09-05T21:08:32Z",
"published": "2017-10-24T18:33:36Z",
"aliases": [
"CVE-2015-9097"
],
"summary": "mail CRLF Injection vulnerability",
"summary": "Mail Gem CRLF Injection vulnerability",
"details": "The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.",
"severity": [
{
@@ -20,6 +20,11 @@
"ecosystem": "RubyGems",
"name": "mail"
},
"ecosystem_specific": {
"affected_functions": [
""
]
},
"ranges": [
{
"type": "ECOSYSTEM",