VYPR

Airmail

by Airmailapp

CVEs (1)

  • CVE-2018-15667HigAug 21, 2018
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. The handler has no restriction…