https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 23:37:49 +0000 https://cve.radiocsirt.org/vuln/cve-2021-37845 <p>An issue was discovered in Citadel through webcit-932. A meddler-in-the-middle attacker can fixate their own session during the cleartext phase before a STARTTLS command (a violation of &#34;The STARTTLS command is only valid in non-authenticated state.&#34; in RFC2595). This potentially allows an attacker to cause a victim&#39;s e-mail messages to be stored into an attacker&#39;s IMAP mailbox, but depends on details of the victim&#39;s client behavior.</p> <p>An issue was discovered in Citadel through webcit-932. A meddler-in-the-middle attacker can fixate their own session during the cleartext phase before a STARTTLS command (a violation of &#34;The STARTTLS command is only valid in non-authenticated state.&#34; in RFC2595). This potentially allows an attacker to cause a victim&#39;s e-mail messages to be stored into an attacker&#39;s IMAP mailbox, but depends on details of the victim&#39;s client behavior.</p> https://cve.radiocsirt.org/vuln/cve-2021-37845