NetSight
medium5.3

CVE-2024-49394

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed em…

Impact

In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.

Affected products

VendorProductAffected versions
MuttMutt
All versions
NeomuttNeomutt
All versions
RedhatEnterprise Linux
Versions 8.0, 9.0

Weakness classification

References