| Package | Affected versions | Patched versions |
|---|---|---|
| dovecot | ≥ 2.2.26, < 2.3.13 | 2.3.13 |
An issue was discovered in Dovecot before 2.3.13. By using IMAP IDLE, an authenticated attacker can trigger unhibernation via attacker-controlled parameters, leading to access to other users' email messages (and path disclosure).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free