Scheme Handler Information Disclosure: CVE-2018-15668 Scheme Handler Information Disclosure: CVE-2018-15668

Home  |  Research  |  Resources  |  Advisories  |  Airmail 3 3.5.9 for MacOS

Airmail 3 3.5.9 for MacOS

Scheme Handler Information Disclosure




Bloop S.R.L.


Airmail 3 for Mac

Product version


Vulnerability Details

The "send" command in the airmail:// URL scheme allows an external application to send arbitrary emails from an active account. URL parameters for the "send" command with the "attachment_" prefix designate attachment parameters. If the value of an attachment parameter corresponds to an accessible file path, the file is attached to the outbound message. In addition, relative file paths are acceptable attachment parameter values. The handler can be invoked using any method that invokes the URL handler such as a hyperlink in an email. The user is not prompted when the handler processes the "send" command which automatically sends an email with designated attachments from the target account to a target address.

Learn More →

Vendor response

No response.

Disclosure timeline

08-06-2018 - Vendor disclosure via email
08-13-2018 - Vendor notified via Support Page
08-21-2018 - Vendor notified of the advisory release

Offensive Minded Security Exploit Development

We are an international squad of professionals working as one.