Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-7769 →
DEBIAN-CVE-2020-7769
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
node-nodemailer
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.16-1"}]}]
Debian:13
node-nodemailer
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.16-1"}]}]
Debian:14
node-nodemailer
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.16-1"}]}]
Références
- advisory security-tracker.debian.org