| Package | Affected versions | Patched versions |
|---|---|---|
| imap | ≥ 2.5.0, < 2.5.14≥ 3.0.0, < 3.0.12 | 2.5.143.0.12 |
Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that arrived over the same connection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free