CVE-2023-52354

HIGH

chasquid < 1.13 - SMTP Smuggling via LF-Terminated Lines

Title source: llm
STIX 2.1

Description

chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted.

References (1)

Core 1
Core References

Scores

CVSS v3 7.5
EPSS 0.0047
EPSS Percentile 36.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-444
Status published
Products (2)
albertito/chasquid 0 - 1.13Go
blitiri/chasquid < 1.13
Published Jan 22, 2024
Tracked Since Feb 18, 2026