critical9.8
CVE-2020-14932
compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request.
Impact
compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Squirrelmail | Squirrelmail | Version 1.4.22 |