z-push/z-push-dev vulnerabilities
1 known vulnerability in z-push/z-push-dev from Z-push/z-push-dev. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest first
- 9.0 Critical severity
z-push/z-push-dev: Improper Neutralization of Special Elements used in an SQL Command
Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend. An attacker can inject malicious commands by manipulating the username field in basic authentication. This allows the att