Vulnerability Description
Datalust Seq.App.EmailPlus (aka seq-app-htmlemail) 3.1.0-dev-00148, 3.1.0-dev-00170, and 3.1.0-dev-00176 can use cleartext SMTP on port 25 in some cases where encryption on port 465 was intended.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Datalust | Seq.App.Emailplus | 3.1.0 |
Related Weaknesses (CWE)
References
- https://github.com/datalust/seq-app-htmlemail/pull/93PatchThird Party Advisory
- https://github.com/datalust/seq-app-htmlemail/pull/93PatchThird Party Advisory
FAQ
What is CVE-2021-43270?
CVE-2021-43270 is a vulnerability with a CVSS score of 7.5 (HIGH). Datalust Seq.App.EmailPlus (aka seq-app-htmlemail) 3.1.0-dev-00148, 3.1.0-dev-00170, and 3.1.0-dev-00176 can use cleartext SMTP on port 25 in some cases where encryption on port 465 was intended.
How severe is CVE-2021-43270?
CVE-2021-43270 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-43270?
Check the references section above for vendor advisories and patch information. Affected products include: Datalust Seq.App.Emailplus.