mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish GHSA-jw7r-rxff-gv24
This commit is contained in:
@@ -1,14 +1,19 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-jw7r-rxff-gv24",
|
||||
"modified": "2025-02-13T19:10:22Z",
|
||||
"modified": "2025-02-14T17:43:39Z",
|
||||
"published": "2024-02-27T18:31:02Z",
|
||||
"aliases": [
|
||||
"CVE-2024-21742"
|
||||
],
|
||||
"summary": "Apache James MIME4J improper input validation vulnerability",
|
||||
"details": "Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.\nThis can be exploited by an attacker to add unintended headers to MIME messages.",
|
||||
"severity": [],
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
{
|
||||
"package": {
|
||||
@@ -58,7 +63,8 @@
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-20"
|
||||
"CWE-20",
|
||||
"CWE-74"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": true,
|
||||
|
||||
Reference in New Issue
Block a user