CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.9. See the original NVD description below for full technical details.
CVE
CVE-2020-14928
Severity
MEDIUM
CVSS
5.9
EPSS
2.81%
Original NVD Description
evolution-data-server (eds) through 3.36.3 has a STARTTLS buffering issue that affects SMTP and POP3. When a server sends a "begin TLS" response, eds reads additional data and evaluates it in a TLS context, aka "response injection."
Related CVEs
Other vulnerabilities affecting the same vendor(s)