CVE-2024-21742 Apache James Mime4J: Mime4J DOM header injection

2024-02-2716:21:16

CWE-20

apache

www.cve.org

apache james mime4j

input validation

header injection

mime messages

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.
This can be exploited by an attacker to add unintended headers to MIME messages.

CNA Affected

[
  {
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected",
    "packageName": "org.apache.james:apache-mime4j-dom",
    "product": "Apache James Mime4J",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "0.8.9",
        "status": "affected",
        "version": "0",
        "versionType": "maven"
      }
    ]
  }
]