Vulnerabilities

 1 via 1 paths

Dependencies

 2

Source

 GitHub

Commit

 170bd2dc

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Severity
  • 1
Status
  • 1
  • 0
  • 0

medium severity

Improper Neutralization

  • Vulnerable module: com.sun.mail:jakarta.mail
  • Introduced through: com.sun.mail:jakarta.mail@1.6.7

Detailed paths

  • Introduced through: adaptris/interlok-mail@adaptris/interlok-mail#170bd2dca7b6d4582bfd3a19849c20b1a3ff3a7f › com.sun.mail:jakarta.mail@1.6.7
    Remediation: Upgrade to com.sun.mail:jakarta.mail@1.6.8.

Overview

Affected versions of this package are vulnerable to Improper Neutralization via the handling of SMTP message input. An attacker can inject arbitrary SMTP commands by supplying specially crafted input containing carriage return and line feed characters.

Remediation

Upgrade com.sun.mail:jakarta.mail to version 1.6.8, 2.0.2 or higher.

References

Improper Neutralization vulnerability report