Mailvelope Mailvelope
4 CVEs affecting Mailvelope Mailvelope. Latest disclosed: 2019-07-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-9149 | Medium | 6.5 | 2019-07-09 | Mailvelope prior to 3.3.0 allows private key operations without user interaction via its client-API. By modifying an URL parameter in Mailvelope, an attacker i… |
CVE-2019-9150 | Medium | 5.3 | 2019-07-09 | Mailvelope prior to 3.3.0 does not require user interaction to import public keys shown on web page. This functionality can be tricked to either hide a key imp… |
CVE-2019-9148 | Medium | 4.3 | 2019-07-09 | Mailvelope prior to 3.3.0 accepts or operates with invalid PGP public keys: Mailvelope allows importing keys that contain users without a valid self-certificat… |
CVE-2019-9147 | Medium | 4.3 | 2019-07-09 | Mailvelope prior to 3.1.0 is vulnerable to a clickjacking attack against the settings page. As the settings page is intended to be accessible from web applicat… |