CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVE-2024-21742
Medium (5.3) in apache james mime4j. EPSS 1.1% chance of exploitation in the next 30 days. Fixed in org.apache.james:apache-mime4j-core 0.8.10.
Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message.
This can be exploited by an attacker to add unintended headers to MIME messages.
Severity
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
- CWE
- CWE-74
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:james_mime4j
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jw7r-rxff-gv24 | Maven | org.apache.james:apache-mime4j-core | <0.8.10 | 0.8.10 |