GitHub Advisoryadvisory · Maven

GHSA-p7vm-phxx-g722 Improper Input Validation in Apache Commons Email

HIGH Published 2022-05-17 Modified 2022-06-30 Official page ↗
Aliases
CVE-2017-9801
Ecosystem
Maven
Packages
org.apache.commons:commons-email
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-20
Reviewed
2022-06-30

Affected packages

• Maven org.apache.commons:commons-email: >= 1.0, < 1.5 → fixed in 1.5

Description

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.

Related

Alias · CVE (1)

  • CVE-2017-9801 When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add… vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References