CVE-2021-32816

높음 7.5CVE-2021-32816 · Published 14/05/2021 · updated 17/06/2026

요약

CVE-2021-32816은(는) protonmail (protonmail)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.0%, 전체 취약점의 63.3%보다 높음.
조치: 3.16.60 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
protonmail protonmail	`< 3.16.60`	`3.16.60`

Description

ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Client before version 3.16.60 has a regular expression denial-of-service vulnerability. This was fixed in commit 6687fb. There is a full report available in the referenced GHSL-2021-027.

References

ProtonMail/WebClient commit 6687fbb · Patch
securitylab.github.com/advisories/GHSL-2021-027-redos-ProtonMail · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free