rumble mail server vulnerabilities and fixes

Recent CVEs affecting rumble mail server, with upgrade or downgrade steps. 4 tracked.

Also searched as: rumblemailserver.

rumble mail server has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-04-04. Highest priority: CVE-2021-43456 (score 42/100).

• CVE-2021-43462 MEDIUM 5.4 DOWNGRADE A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.
• CVE-2021-43461 MEDIUM 5.4 DOWNGRADE Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.
• CVE-2021-43459 MEDIUM 5.4 DOWNGRADE A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) p
• CVE-2021-43456 HIGH 7.8 DOWNGRADE An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted fil

FAQ

How do I fix rumble mail server vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is rumble mail server being exploited right now?

None of the tracked rumble mail server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which rumble mail server CVE should I patch first?

CVE-2021-43456 currently ranks highest (42/100): An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted fil.

RSS feed for rumble mail server · ← Back to latest CVEs