mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-26 05:17:47 +02:00
704 B
704 B
CVE-2020-14928
Description
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
POC
Reference
Github
No PoCs found on GitHub currently.