Skip to content

Vendor

supmua vulnerabilities

2 published CVES affecting supmua, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of supmua alerts

Products

Latest supmua CVEs

Newest publication first

  1. CVE-2013-4478 Sup Code Injection vulnerability

    Published
    MediumCVSS 6.8 EPSS 2.1% PoC

    Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment.

  2. CVE-2013-4479 Sup Code Injection vulnerability

    Published
    MediumCVSS 6.8 EPSS 3.2% PoC

    lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.