Threats tagged 'ghsa-8mr9-wfcj-h3rm'

MIME::Field::ParamVal versions before 5.521 for Perl have a vulnerability where an invalid Content-Type parameter causes the parser to stop processing subsequent parameters, including the multipart boundary. This allows a remote sender to hide attachments from filters relying on ambiguous_content() detection, while the recipient's mail client still displays the attachment.