Launchpad.net

CVE 2020-15047

MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers.

See the CVE page on Mitre.org for more details.