CVE-2020-24904

An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted "mailto" link.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.83% chance of exploitation in the next 30 days, 55th percentile

Published

2023-08-11

Updated

2024-10-09

Proof-of-concept exploits (1)

• davesteele/gnome-gmail/issues/84

References

• CVE Record
• NVD entry

Related

• CVE-2020-24903
• CVE-2020-24912
• CVE-2020-24902
• CVE-2020-24913
• CVE-2020-24901
• CVE-2020-24916