CVE-2020-14932: Critical severity squirrelmail vulnerability

Published Jun 20, 2020

Updated

compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php.

Affected Software

1 affected component

Squirrelmail Squirrelmail=1.4.22

Event History

Jun 20, 2020

CVE Published

via MITRE·12:07 PM

Data Sourced

via MITRE·12:07 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-14932?

CVE-2020-14932 is classified as a moderate severity vulnerability due to the potential for remote code execution through unserialization.

How do I fix CVE-2020-14932?

To fix CVE-2020-14932, upgrade to the latest version of SquirrelMail or apply a patch that mitigates the unserialization of untrusted data.

What versions of SquirrelMail are affected by CVE-2020-14932?

CVE-2020-14932 specifically affects SquirrelMail version 1.4.22.

What is the impact of CVE-2020-14932 on SquirrelMail users?

The impact of CVE-2020-14932 on SquirrelMail users includes the risk of remote code execution, which can lead to unauthorized access and data compromise.

Is CVE-2020-14932 related to any other vulnerabilities?

CVE-2020-14932 is related to mailto.php, as it involves the handling of mailto data within the application.