The vulnerability arises from improper handling of extra parameters when using the safe filter with variable expansion in OX Dovecot Pro. Specifically, all following pipelines on the same string are mistakenly interpreted as safe, which allows unsafe data to be unescaped. This behavior can be exploited to perform SQL or LDAP injection attacks in authentication contexts. The CVSS 3.1 base score is 7.4, indicating high severity with network attack vector, high impact on confidentiality and integrity, but requires high attack complexity and no privileges or user interaction. No patch or official remediation is currently available according to the vendor advisory and Red Hat advisory. Users should avoid using the safe filter until a fix is released.

Successful exploitation can lead to SQL or LDAP injection attacks during authentication, compromising confidentiality and integrity of the system. This could allow attackers to bypass authentication or manipulate backend data stores. There are no known public exploits at this time.

No official fix or patch is currently available. The vendor advisory and Red Hat advisory do not indicate any temporary or official remediation. Users should avoid using the safe filter with variable expansion in affected versions until a fixed version is released. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.