CVE-2022-22931

Apache James Server (prior to version 3.6.2) is affected by a path traversal vulnerability tied to CVE-2021-40525. The CVE-2022-22931 entry notes that the fix for CVE-2021-40525 does not prepend delimiters during valid directory validations, enabling a user to access other users’ data stores when...

CVE-2004-2650

The CVE-2004-2650 entry concerns the Apache James spooler. Affected component: James 2.2.0 spooler retrieve function. Root cause: triggering various error conditions in the retrieve function can prevent a lock release, causing a memory leak and resulting in local-denial-of-service impact. The ava...