From 39e2151ce85fc282a21f66c7dffcdddc4e17853f Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 14 Feb 2025 17:44:51 +0000 Subject: [PATCH] Publish GHSA-jw7r-rxff-gv24 --- .../02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json b/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json index b321bfae6dd..f0d40fc1eaf 100644 --- a/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json +++ b/advisories/github-reviewed/2024/02/GHSA-jw7r-rxff-gv24/GHSA-jw7r-rxff-gv24.json @@ -1,14 +1,19 @@ { "schema_version": "1.4.0", "id": "GHSA-jw7r-rxff-gv24", - "modified": "2025-02-13T19:10:22Z", + "modified": "2025-02-14T17:43:39Z", "published": "2024-02-27T18:31:02Z", "aliases": [ "CVE-2024-21742" ], "summary": "Apache James MIME4J improper input validation vulnerability", "details": "Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.\nThis can be exploited by an attacker to add unintended headers to MIME messages.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], "affected": [ { "package": { @@ -58,7 +63,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-20" + "CWE-20", + "CWE-74" ], "severity": "MODERATE", "github_reviewed": true,