Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5 and 0.5.15, when Net::IMAP#id is called with a hash argument, although the ID field value strings are correctly quoted (escaping quoted specials), they were not validated to prohibit CRLF sequences. While Net::IMAP#enable does process its arguments for aliases, it does not validate them as valid atoms (or as a list of valid atoms). The #to_s value is sent verbatim. Arguments to either command could be used by an attacker to inject arbitrary IMAP commands. This vulnerability is fixed in 0.6.5 and 0.5.15.
CVSS Details
- CVSS 4.0 Base Score: 5.8 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade ruby-debuginfoUpgrade rubygemsUpgrade rubygem-abrtUpgrade ruby4.0-develUpgrade rubygem-pg-debugsourceUpgrade rubygem-typeprofUpgrade ruby4.0-debuginfoUpgrade ruby-develUpgrade ruby4.0-debugsourceUpgrade rubygem-irbUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade rubygem-psych-debuginfoUpgrade ruby4.0-rubygem-pgUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-rbsUpgrade rubygem-rdocUpgrade rubygem-pgUpgrade rubyUpgrade rubygem-mysql2-docUpgrade ruby-default-gemsUpgrade rubygem-racc-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-bundlerUpgrade rubygem-io-console-debuginfoUpgrade rubygem-minitestUpgrade rubygem-power_assertUpgrade ruby-bundled-gems-debuginfoUpgrade rubygem-rbs-debuginfoUpgrade rubygem-jsonUpgrade ruby-debugsourceUpgrade rubygem-bigdecimalUpgrade rubygem-abrt-docUpgrade rubygem-io-consoleUpgrade ruby-docUpgrade rubygem-rssUpgrade rubygem-pg-docUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-pg-debuginfoUpgrade ruby-libsUpgrade rubygem-psychUpgrade rubygem-raccUpgrade ruby4.0Upgrade ruby4.0-rubygem-pg-debuginfoUpgrade ruby4.0-docUpgrade rubygem-rexmlUpgrade ruby4.0-rubygem-mysql2Upgrade rubygems-develUpgrade ruby-bundled-gemsUpgrade rubygem-rakeUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-json-debuginfo | Aug 28, 2026 | Jun 22, 2026 |
| Rocky_linux | — | Upgrade rubygem-jsonUpgrade rubygem-racc-debuginfoUpgrade rubygem-mysql2-debugsourceUpgrade ruby-bundled-gemsUpgrade ruby4.0-rubygem-mysql2-debuginfoUpgrade ruby-debugsourceUpgrade rubyUpgrade ruby-libs-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade ruby4.0-rubygem-pgUpgrade ruby4.0-debugsourceUpgrade rubygem-psychUpgrade ruby4.0-debuginfoUpgrade rubygem-pg-debugsourceUpgrade rubygem-mysql2Upgrade ruby4.0-rubygem-pg-debuginfoUpgrade ruby4.0Upgrade ruby-libsUpgrade rubygem-pgUpgrade rubygem-psych-debuginfoUpgrade rubygem-rbsUpgrade rubygem-rbs-debuginfoUpgrade rubygem-pg-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade ruby-develUpgrade rubygem-bigdecimalUpgrade ruby4.0-develUpgrade rubygem-raccUpgrade rubygem-io-console-debuginfoUpgrade ruby4.0-rubygem-mysql2Upgrade rubygem-json-debuginfoUpgrade ruby-bundled-gems-debuginfo | Aug 28, 2026 | Aug 27, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub