CVE-2024-49393 — Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing
In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include …
Published: 2024-11-12 · CVSS: 6.5 · CVSS 3.1
In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7