GHSA-jw7r-rxff-gv24
Suggest an improvement- Source
- https://github.com/advisories/GHSA-jw7r-rxff-gv24
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-jw7r-rxff-gv24
- Aliases
- Related
- Published
- 2024-02-27T18:31:02Z
- Modified
- 2024-11-28T05:43:21.682843Z
- Summary
- Apache James MIME4J improper input validation vulnerability
- Details
-
Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages.
- Database specific
{ "nvd_published_at": "2024-02-27T17:15:12Z", "cwe_ids": [ "CWE-20" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-02-27T21:54:39Z" }- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2024-21742
- https://github.com/apache/james-mime4j/commit/9dec5df2a588fed8027839815daefa79ee66efd1
- https://github.com/apache/james-mime4j/commit/d25fb3fd35db42b060789a20634fbe3cb84aba17
- https://github.com/apache/james-mime4j
- https://lists.apache.org/thread/nrqzg93219wdj056pqfszsd33dc54kfy
- http://www.openwall.com/lists/oss-security/2024/02/27/5
Affected packages
Maven / org.apache.james:apache-mime4j-core
Package
- Name
- org.apache.james:apache-mime4j-core
- View open source insights on deps.dev
- Purl
- pkg:maven/org.apache.james/apache-mime4j-core