diff --git a/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json b/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json index b321bfae6dd..f0d40fc1eaf 100644 --- a/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json +++ b/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json @@ -1,14 +1,19 @@ { "schema_version": "1.4.0", "id": "GHSA-jw7r-rxff-gv24", - "modified": "2025-02-13T19:10:22Z", + "modified": "2025-02-14T17:43:39Z", "published": "2024-02-27T18:31:02Z", "aliases": [ "CVE-2024-21742" ], "summary": "Apache James MIME4J improper input validation vulnerability", "details": "Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.\nThis can be exploited by an attacker to add unintended headers to MIME messages.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], "affected": [ { "package": { @@ -58,7 +63,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-20" + "CWE-20", + "CWE-74" ], "severity": "MODERATE", "github_reviewed": true,