KDE Trojita vulnerabilities

2 vulnerabilities

Known vulnerabilities in KDE Trojita, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.3CVE-2021-38372ubuntutrojita+1
EPSS score
0.79%
In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS.5.9CVE-2017-176899foldersnine+22
EPSS score
4.22%
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to plaintext exfiltration, aka EFAIL.