Apache Software Foundation Apache Pony Mail vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_pony_mail.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2017-5658MEDIUMCVSS 5.3v0.7 to 0.9 (incubating)2018-10-04

CVE-2017-5658 [MEDIUM] CWE-200 CVE-2017-5658: The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data wit The statistics generator in Apache Pony Mail 0.7 to 0.9 was found to be returning timestamp data without proper authorization checks. This could lead to derived information disclosure on private lists about the timing of specific email subjects or text bodies, though without disclosing the content itself. As this was primarily used as a caching featur