Skip to content

Apache James MIME4J improper input validation vulnerability

Moderate severity GitHub Reviewed Published Feb 27, 2024 to the GitHub Advisory Database • Updated Mar 1, 2024

Package

maven org.apache.james:apache-mime4j-core (Maven)

Affected versions

< 0.8.10

Patched versions

0.8.10

Description

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.
This can be exploited by an attacker to add unintended headers to MIME messages.

References

Published by the National Vulnerability Database Feb 27, 2024
Published to the GitHub Advisory Database Feb 27, 2024
Reviewed Feb 27, 2024
Last updated Mar 1, 2024

Severity

Moderate

Weaknesses

CVE ID

CVE-2024-21742

GHSA ID

GHSA-jw7r-rxff-gv24

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.