parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes the resulting file to be written outside the intended samples directory. An attacker who can cause a forensic failure report with a crafted Subject to be processed can write a dot-prefixed file with attacker-controlled content to an ancestor directory of the configured samples output path. Exploitation requires that file output for forensic report samples is enabled.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
References
History
Thu, 03 Sep 2026 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes the resulting file to be written outside the intended samples directory. An attacker who can cause a forensic failure report with a crafted Subject to be processed can write a dot-prefixed file with attacker-controlled content to an ancestor directory of the configured samples output path. Exploitation requires that file output for forensic report samples is enabled. | |
| Title | parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject | |
| Weaknesses | CWE-22 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-09-03T20:41:16.071Z
Reserved: 2026-08-29T17:20:57.081Z
Link: CVE-2026-82521
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-03T21:17:22.553
Modified: 2026-09-03T21:17:22.553
Link: CVE-2026-82521
Redhat
No data.
OpenCVE Enrichment
No data.