# [Code Vulnerabilities Put Proton Mails at ...

npub13z7…xcwf

2023-10-04 18:36:06

# [Code Vulnerabilities Put Proton Mails at Risk](https://www.sonarsource.com/blog/code-vulnerabilities-leak-emails-in-proton-mail/)

### Paul Gerste
### VULNERABILITY RESEARCHER

September 5, 2023
12 MIN READ

-----

## Key Information

__Key Information__

+ In June 2022, the Sonar Research team discovered critical code vulnerabilities in multiple encrypted email solutions, including Proton Mail, Skiff, and Tutanota.

+ These privacy-oriented webmail services provide end-to-end encryption, making communications safe in transit and at rest. Our findings affect their web clients, where the messages are decrypted, mobile clients were not affected.

+ The vulnerabilities would have allowed attackers to steal emails and impersonate victims if they interacted with malicious messages.

+ Nearly 70 million users were at risk on Proton Mail alone.

+ Thanks to our report, the issue has been fixed and there are no signs of in-the-wild exploitation.

-----
#security #news #protonmail #tutanota #skiff #email

Author Public Key

npub13z7hf0qrh8amllz3e6acm6gm86lqrlrz0pgwtdxjvnykx35mpwnqujxcwf

Seen on

wss://relay.nostr.band

Show more details

Published at

2023-10-04 18:36:06

Kind type

1 Short Text Note

Event JSON

{ "id": "0ac88cc50499b9cfe66ccd3ad9b43a252e373a9588cd986d6459509ee0938ce8", "pubkey": "88bd74bc03b9fbbffc51cebb8de91b3ebe01fc627850e5b4d264c963469b0ba6", "created_at": 1696444566, "kind": 1, "tags": [ [ "t", "security" ], [ "t", "security" ], [ "t", "news" ], [ "t", "news" ], [ "t", "protonmail" ], [ "t", "protonmail" ], [ "t", "tutanota" ], [ "t", "tutanota" ], [ "t", "skiff" ], [ "t", "skiff" ], [ "t", "email" ], [ "t", "email" ], [ "r", "https://www.sonarsource.com/blog/code-vulnerabilities-leak-emails-in-proton-mail/)" ] ], "content": "# [Code Vulnerabilities Put Proton Mails at Risk](https://www.sonarsource.com/blog/code-vulnerabilities-leak-emails-in-proton-mail/)\n\n\n### Paul Gerste\n### VULNERABILITY RESEARCHER\n\nSeptember 5, 2023\n12 MIN READ\n\n-----\n\n## Key Information\n\n__Key Information__\n\n+ In June 2022, the Sonar Research team discovered critical code vulnerabilities in multiple encrypted email solutions, including Proton Mail, Skiff, and Tutanota.\n\n+ These privacy-oriented webmail services provide end-to-end encryption, making communications safe in transit and at rest. Our findings affect their web clients, where the messages are decrypted, mobile clients were not affected.\n\n+ The vulnerabilities would have allowed attackers to steal emails and impersonate victims if they interacted with malicious messages.\n\n+ Nearly 70 million users were at risk on Proton Mail alone.\n\n+ Thanks to our report, the issue has been fixed and there are no signs of in-the-wild exploitation.\n\n-----\n#security #news #protonmail #tutanota #skiff #email", "sig": "27a18138d4c6fd8cb64a6306493dc20f3ad4bf2bc58216b3cba9e93a96a3a9aa64e14b0a6594b2ad23a433ae739a48125cb936ef3080719dd57f1c969121b91c" }