Security Advisory

CVE-2019-9150

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-07-09 20:49:50

Last updated 2024-08-04 21:38:46

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key import from the user or obscure which key was imported.

← Browse all CVEs View on cve.org ↗