Rubygems Mail Gem vulnerabilities

2 vulnerabilities

Known vulnerabilities in Rubygems Mail Gem, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5MediumCVE-2012-2139debian · ruby-mail +2 moredebian ruby-mailDirectory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.EPSS4.92%7.5HighCVE-2012-2140debian · ruby-mail +2 moredebian ruby-mailThe Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.EPSS4.47%