Apache Commons Email (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-03-20. Vendor: Apache Software Foundation.

CVEs of Apache Commons Email

• CVE-2018-1294 - CVSS 7.5 (high), 2018-03-20: If a user of Apache Commons Email (typically an application programmer) passes unvalidated input as the so-called "Bounce Address", and that input contains…
• CVE-2017-9801 - CVSS 7.5 (high), 2017-08-07: When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.