CVE-2023-52354

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 22, 2024
Updated: Jan 29, 2024
CWE ID 444

Summary

CVE-2023-52354 is a vulnerability that affects chasquid versions before 1.13, allowing for SMTP smuggling due to the acceptance of LF-terminated lines. This vulnerability has a high severity rating with a base score of 7.5. It requires no privileges and does not require user interaction, making it a potential threat via network attack vector. While it does not impact confidentiality, it does have a high impact on integrity. The vulnerability poses a risk to organizations as it can be exploited to manipulate or bypass security measures. To remediate this vulnerability, users should update chasquid to version 1.13 or later. Note: The information provided is based on the available data and does not contain any analysis or interpretation on my part.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share