FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

exim -- SQL injection

Affected packages
exim < 4.98.1

Details

VuXML ID 07c34df5-f299-11ef-a441-b42e991fc52e
Discovery 2025-02-21
Entry 2025-02-24

cve@mitre.org reports:

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection.

References

CVE Name CVE-2025-26794
URL https://nvd.nist.gov/vuln/detail/CVE-2025-26794