CVE-2021-38372: Kde Trojita

Low severity, CVSS 3.7. EPSS: 0.8% chance of exploitation in the next 30 days.

In KDE Trojita 0.7, man-in-the-middle attackers can create new folders because untagged responses from an IMAP server are accepted before STARTTLS.

Affected products

• Kde Trojita: version 0.7 only

Published 2021-08-10. Last modified 2026-06-17.