6.5
CVSSv3

CVE-2020-24904

Published: 11/08/2023 Updated: 17/08/2023
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

An issue exists in attach parameter in GNOME Gmail version 2.5.4, allows remote malicious users to gain sensitive information via crafted "mailto" link.

Vulnerable Product Search on Vulmon Subscribe to Product

davesteele gnome-gmail 2.5.4

Vendor Advisories

Debian Bug report logs - #1051726 viagee: CVE-2020-24904 Package: src:viagee; Maintainer for src:viagee is David Steele <steele@debianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Mon, 11 Sep 2023 19:21:01 UTC Severity: important Tags: security, upstream Forwarded to githubcom/davesteele/ ...