rumble mail server project vulnerabilities

Recent CVEs affecting rumble mail server project products. 4 tracked.

rumble mail server project has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-04-04. Highest priority: CVE-2021-43456 (score 42/100).

• CVE-2021-43462 MEDIUM 5.4 DOWNGRADE A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter.
• CVE-2021-43461 MEDIUM 5.4 DOWNGRADE Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the servername parameter.
• CVE-2021-43459 MEDIUM 5.4 DOWNGRADE A Cross Site Scripting (XSS) vulnerability exists in Rumble Mail Server 0.51.3135 via the (1) domain and (2) p
• CVE-2021-43456 HIGH 7.8 DOWNGRADE An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted fil

FAQ

How do I fix rumble mail server project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is rumble mail server project being exploited right now?

None of the tracked rumble mail server project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which rumble mail server project CVE should I patch first?

CVE-2021-43456 currently ranks highest (42/100): An Unquoted Service Path vulnerablility exists in Rumble Mail Server 0.51.3135 via via a specially crafted fil.

Products

• rumble mail server

RSS feed for rumble mail server project · ← Back to latest CVEs