Apache James Denial of Service Vulnerability (CNVD-2022-02755)

Apache James is an open source Smtp and Pop3 mail transfer agent and Nntp news server written entirely in Java from the Apache Foundation in the U.S. A security vulnerability exists in versions of Apache James prior to 3.6.1, which could be exploited by attackers to write IMAP list commands using vulnerable regular expressions to organize denial of service.