Executive brief
Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail Server
Affected products
- Go github.com/foxcpp/maddy
Junglewise Threat Intelligence
CVE-2022-24732: Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail Server
CVE-2022-24732 · Severity: low · CVSS 3.1 · Published 2022-03-07
Technologies: github.com/foxcpp/maddy (Go). Vendors: Go.
Related threats
- foxcpp Maddy Mail Server LDAP filter injection in auth.ldap
- GO-2022-0378 - MD5 hash support in github.com/foxcpp/maddy
- GO-2022-0374 - S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy
- GO-2022-0306 - Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy
- GO-2023-1630 - Full authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy