Apache James Mime4j (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-02-27. Vendor: Apache Software Foundation.

CVEs of Apache James Mime4j

• CVE-2024-21742 - CVSS 5.3 (medium), 2024-02-27: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to…
• CVE-2022-45787 - CVSS 5.5 (medium), 2023-01-06: Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue…