• info
• discussion
• exploit
• solution
• references

Dovecot ACL Plugin Security Bypass Vulnerability

An attacker with 'i' insert permission can exploit this issue by using 'APPEND' or 'COPY' commands on a mailbox.