Apache Spamassassin (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2019-12-12. Vendor: Apache.

CVEs of Apache Spamassassin

• CVE-2019-12420 - CVSS 7.5 (high), 2019-12-12: In Apache SpamAssassin before 3.4.3, a message can be crafted in a way to use excessive resources. Upgrading to SA 3.4.3 as soon as possible is the…
• CVE-2018-11805 - CVSS 6.7 (medium), 2019-12-12: In Apache SpamAssassin before 3.4.3, nefarious CF files can be configured to run system commands without any output or errors. With this, exploits can be…