Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1qdzdyLXJ4ZmYtZ3YyNM4AA5if

Apache James MIME4J improper input validation vulnerability

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.
This can be exploited by an attacker to add unintended headers to MIME messages.

Permalink: https://github.com/advisories/GHSA-jw7r-rxff-gv24
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qdzdyLXJ4ZmYtZ3YyNM4AA5if
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 2 months ago
Updated: about 2 months ago

Identifiers: GHSA-jw7r-rxff-gv24, CVE-2024-21742
References:

• https://nvd.nist.gov/vuln/detail/CVE-2024-21742
• https://lists.apache.org/thread/nrqzg93219wdj056pqfszsd33dc54kfy
• https://github.com/apache/james-mime4j/commit/9dec5df2a588fed8027839815daefa79ee66efd1
• https://github.com/apache/james-mime4j/commit/d25fb3fd35db42b060789a20634fbe3cb84aba17
• http://www.openwall.com/lists/oss-security/2024/02/27/5
• https://github.com/advisories/GHSA-jw7r-rxff-gv24

Repository: https://github.com/apache/james-mime4j
Blast Radius: 0.0

Affected Packages