Threats tagged 'ghsa-r6mw-j6c7-mgp2'

A security flaw exists in the Email Notification Handler component of nasa-gcn (gcn.nasa.gov) up to commit b299b562af665878964b981a459f0a9c04b11adf. The vulnerability involves improper authorization due to manipulation of the Recipient argument in the /user/email file processing. The flaw can be exploited remotely. Public exploit code is available. The product uses a rolling release model, so specific affected or fixed versions are not provided. A fix has been proposed but is pending acceptance.