Jianjun

**Name of the Vulnerable Software and Affected Versions** OpenDMARC versions 1.3.2 and 1.4.x **Description** The issue allows attacks to bypass SPF and DMARC authentication when the HELO field is inconsistent with the MAIL FROM field, specifically when OpenDMARC is used with pypolicyd-spf 2.0.2. **Recommendations** For OpenDMARC versions 1.3.2 and 1.4.x, consider updating pypolicyd-spf to a version later than 2.0.2 to mitigate the risk of SPF and DMARC authentication bypass. As a temporary workaround, consider restricting the use of the HELO field to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** OpenDMARC versions 1.3.2 and 1.4.x **Description** The issue is related to the incorrect parsing and interpretation of SPF/DKIM authentication results, allowing attacks to inject false information about the domain that originated an e-mail message. This can be exploited by a remote attacker to impact data integrity. **Recommendations** For OpenDMARC versions 1.3.2 and 1.4.x, consider temporarily disabling the SPF/DKIM authentication result parsing functionality until a patch is available. Restrict access to the authentication results interpretation module to minimize the risk of exploitation. Avoid using the affected OpenDMARC versions for critical email authentication tasks until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.