← Back

Mbsync Project

mbsync_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Mbsync
mbsync
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-20247
3Debian
FedoraprojectMbsync Project
4Debian Linux
Extra Packages For Enterprise LinuxFedora+1 more
Jun 17, 2026
Feb 23, 2021
N/A· v4
7.4 HIGH· v3
5.8 MEDIUM· v2
A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '...Show more
A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the opposite end of the synchronization channel. The highest threat from this vulnerability is to data confidentiality and integrity.Show less