CVE-2020-14932
No fix known EPSS 1%
compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php.
Products: squirrelmail
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | squirrelmail | no fix |
| Ubuntu Pro 14.04 LTS | squirrelmail | no fix |