CVE-2004-0324: Confirm

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.

Affected products

• Confirm Confirm: version 0.50 only; version 0.51 only; version 0.52 only; version 0.53 only; version 0.54 only; version 0.55 only; …

Published 2004-02-23. Last modified 2026-06-16.