Vendor/product archive

rubygems / mail_gem CVEs

Beta · best-effort

2 CVEs tagged to rubygems / mail_gem — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to rubygems vendor archive

CVE-2012-2140

Published Jul 18, 2012

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2012-2139

Published Jul 18, 2012

Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1