title: HTML injection in email body through email subject
description: Proofpoint Enterprise Protection contains a vulnerability in the email delivery agent that allows an unauthenticated attacker to inject improperly encoded HTML into the email body of a message through the email subject.  The vulnerability is caused by inappropriate encoding when rewriting the email before delivery.This issue affects Proofpoint Enterprise Protection: from 8.20.2 before patch 4809, from 8.20.0 before patch 4805, from 8.18.6 before patch 4804 and all other prior versions.
problem types: CWE-838 Inappropriate Encoding for Output Context
affected:
{
defaultStatus: affected
modules: Email Delivery Agent
product: Proofpoint Enterprise Protection
vendor: Proofpoint
versions:
changes: [at: patch 4809, status: unaffected], lessThan: patch 4809, status: affected, version: 8.20.2, versionType: semver
changes: [at: patch 4805, status: unaffected], lessThan: patch 4805, status: affected, version: 8.20.0, versionType: semver
changes: [at: patch 4804, status: unaffected], lessThan: patch 4804, status: affected, version: 8.18.6, versionType: semver
lessThan: 8.18.6, status: affected, version: 8.0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL