← Back

CVE-2020-28247

nvd nist
Published: Nov 12, 2020Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.

Affected (6)

Products: Lettre: Lettre
Lettre
1 product
Lettre
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Lettre
Lettre
From 0.8.0 to 0.8.3
Lettre
From 0.9.0 to 0.9.5
Lettre
Version 0.10.0 alpha1
Lettre
Version 0.10.0 alpha2
Lettre
Version 0.10.0 alpha3
Lettre
Version 0.7.0

References (6)

Source: cve@mitre.org
PatchThird Party Advisory
Source: cve@mitre.org
ProductThird Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ProductThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.