Apache Software Foundation Apache James Mime4J vulnerabilities

2 vulnerabilities

Known vulnerabilities in Apache Software Foundation Apache James Mime4J, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2024-21742apache software foundation · apache james mime4j +49 more2y agoApache James Mime4J: Mime4J DOM header injectionImproper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages.CVSS5.3MediumEPSS1.09%RoutineCVE-2022-45787apache software foundation · apache james mime4j +2 more3y agoApache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProviderUnproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions. We recommend users to upgrade to MIME4j version 0.8.9 or later.CVSS5.5MediumEPSS0.28%