CVE-2016-4841

Cybozu Mailwise is affected by CVE-2016-4841: versions 5.0.0 through 5.3.2 are vulnerable to email header injection when sending messages. The root cause is improper handling of email headers, allowing a remote attacker to inject arbitrary headers via crafted requests. Public references indicate ...