CVE-2012-1919

CVE-2012-1919 describes a CRLF injection vulnerability in the mime.php component of AtMail Open-Source WebMail Client versions prior to 1.05. This flaw allows remote attackers to perform directory traversal attacks and read arbitrary files by injecting a newline character followed by directory traversal sequences into the 'file' parameter. With a CVSS score of 6.4, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, potentially leading to unauthorized information disclosure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.