CVE-2024-21742 Apache James Mime4J: Mime4J DOM header injection

2024-02-2716:21:16

CWE-20

apache

github.com

cve-2024

apache james mime4j

input validation

header injection

mime messages

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.
This can be exploited by an attacker to add unintended headers to MIME messages.

CNA Affected

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache James Mime4J",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "maven",
        "lessThanOrEqual": "0.8.9"
      }
    ],
    "packageName": "org.apache.james:apache-mime4j-dom",
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "defaultStatus": "unaffected"
  }
]