https://seclists.org/oss-sec/2024/q1/166: CVE-2024-21742: Apache James Mime4J: Mime4J DOM header injection
Published Feb 27, 2024
·Updated
Affected Software
1 affected component
Apache James Mime4J<=0.8.9
Frequently Asked Questions
1
What is the severity of CVE-2024-21742?
The severity of CVE-2024-21742 is rated as low.
2
Which versions of Apache James Mime4J are affected by CVE-2024-21742?
Apache James Mime4J versions through 0.8.9 are affected by CVE-2024-21742.
3
What vulnerability type is CVE-2024-21742?
CVE-2024-21742 is a header injection vulnerability caused by improper input validation in the Mime4J library.
4
How can CVE-2024-21742 be exploited?
An attacker can exploit CVE-2024-21742 to add unintended headers to MIME messages when using the Mime4J DOM.
5
How do I fix CVE-2024-21742?
To fix CVE-2024-21742, upgrade to a version of Apache James Mime4J that resolves the header injection issue.