CVE-2017-9801

2017-08-0100:00:00

apache

www.cve.org

0.003 Low

EPSS

Percentile

68.4%

JSON

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.

CNA Affected

[
  {
    "product": "Apache Commons Email",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.0 to 1.4"
      }
    ]
  }
]