---

CVE-2018-14362 - log back

CVE-2018-14362 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Remote
Type	+ Directory traversal
Description	+ An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
References	+ https://github.com/neomutt/neomutt/commit/9bfab35522301794483f8f9ed60820bdec9be59e + https://gitlab.com/muttmua/mutt/commit/6aed28b40a0410ec47d40c8c7296d8d10bae7576
Notes