CVE-2022-24236

LOW

Snapt Aria 12.8 - Unauthenticated Email Spoofing via Insecure Permissions

Title source: llm

An insecure permissions vulnerability in Snapt Aria v12.8 allows unauthenticated attackers to send e-mails from spoofed users' accounts.

Core 2

Core References

Product, Vendor Advisory x_refsource_misc

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 3.5

EPSS 0.0055

EPSS Percentile 41.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CWE

CWE-732

Status published

Products (1)

snapt/aria 12.8

Published Mar 21, 2022

Tracked Since Feb 18, 2026