CVE-2025-15367: POP3 command injection in user-controlled commands
The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15367?
CVE-2025-15367 is considered a high severity vulnerability due to potential remote command injection.
How do I fix CVE-2025-15367?
To mitigate CVE-2025-15367, ensure that any user-controlled commands passed to the poplib module are sanitized to reject control characters.
What software is affected by CVE-2025-15367?
CVE-2025-15367 specifically affects the poplib module in Python, particularly packages that utilize it.
What kind of attack does CVE-2025-15367 allow?
CVE-2025-15367 allows for POP3 command injection, which can enable attackers to execute arbitrary commands.
Is there an update available to address CVE-2025-15367?
Yes, an update has been released that includes mitigations for CVE-2025-15367, and users should update their installations immediately.