VULNERABILITY INTELLIGENCE

CVE-2021-31988

CVSS score8.8 HIGH
EPSS probability0.95%
CISA KEVNot currently listed
Published2021-10-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and include arbitrary SMTP headers in the generated test email.

Weakness classification

  • product-security@axis.com: CWE-1286
  • nvd@nist.gov: CWE-74

Primary references