high7.5
CVE-2018-20954
The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
Impact
The "Security and Privacy" Encryption feature in Mailpile before 1.0.0rc4 does not exclude disabled, revoked, and expired keys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mailpile | Mailpile | Versions 0.5.0, 0.5.1, 0.5.2, 1.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/mailpile/Mailpile/commit/49b64f62ade9ade3dff9337c7bbc1171eab3d59e
- https://github.com/mailpile/Mailpile/compare/1.0.0rc3...1.0.0rc4
- https://github.com/mailpile/Mailpile/pull/2145
- https://github.com/mailpile/Mailpile/commit/49b64f62ade9ade3dff9337c7bbc1171eab3d59e
- https://github.com/mailpile/Mailpile/compare/1.0.0rc3...1.0.0rc4
- https://github.com/mailpile/Mailpile/pull/2145