Vulnerabilities

 3 via 4 paths

Dependencies

 30

Source

 GitHub

Commit

 3231646a

Find, fix and prevent vulnerabilities in your code.

Test and protect my applications
Issue type
  • 3
  • 1
Severity
  • 1
  • 2
  • 1
Status
  • 4
  • 0
  • 0

high severity

Uncontrolled Recursion

  • Vulnerable module: org.apache.commons:commons-lang3
  • Introduced through: org.apache.velocity:velocity-engine-core@2.4.1

Detailed paths

  • Introduced through: ottlinger/mailversendala@ottlinger/mailversendala#3231646a708c43b7acc8e2aec4e7c8ddedfa7c57 › org.apache.velocity:velocity-engine-core@2.4.1 › org.apache.commons:commons-lang3@3.17.0

Overview

Affected versions of this package are vulnerable to Uncontrolled Recursion via the ClassUtils.getClass function. An attacker can cause the application to terminate unexpectedly by providing excessively long input values.

Remediation

Upgrade org.apache.commons:commons-lang3 to version 3.18.0 or higher.

References

Uncontrolled Recursion vulnerability report

medium severity
new

Improper Neutralization

  • Vulnerable module: com.sun.mail:jakarta.mail
  • Introduced through: org.apache.commons:commons-email@1.6.0

Detailed paths

  • Introduced through: ottlinger/mailversendala@ottlinger/mailversendala#3231646a708c43b7acc8e2aec4e7c8ddedfa7c57 › org.apache.commons:commons-email@1.6.0 › com.sun.mail:jakarta.mail@1.6.7

Overview

Affected versions of this package are vulnerable to Improper Neutralization via the handling of SMTP message input. An attacker can inject arbitrary SMTP commands by supplying specially crafted input containing carriage return and line feed characters.

Remediation

Upgrade com.sun.mail:jakarta.mail to version 1.6.8, 2.0.2 or higher.

References

Improper Neutralization vulnerability report

medium severity

EPL-1.0 license

  • Module: junit:junit
  • Introduced through: org.apache.tamaya:tamaya-core@0.4-incubating

Detailed paths

  • Introduced through: ottlinger/mailversendala@ottlinger/mailversendala#3231646a708c43b7acc8e2aec4e7c8ddedfa7c57 › org.apache.tamaya:tamaya-core@0.4-incubating › junit:junit@4.12
  • Introduced through: ottlinger/mailversendala@ottlinger/mailversendala#3231646a708c43b7acc8e2aec4e7c8ddedfa7c57 › org.apache.tamaya:tamaya-core@0.4-incubating › org.apache.tamaya:tamaya-spisupport@0.4-incubating › junit:junit@4.12

EPL-1.0 license

EPL-1.0 license vulnerability report

low severity

Information Exposure

  • Vulnerable module: junit:junit
  • Introduced through: org.apache.tamaya:tamaya-core@0.4-incubating

Detailed paths

  • Introduced through: ottlinger/mailversendala@ottlinger/mailversendala#3231646a708c43b7acc8e2aec4e7c8ddedfa7c57 › org.apache.tamaya:tamaya-core@0.4-incubating › junit:junit@4.12
  • Introduced through: ottlinger/mailversendala@ottlinger/mailversendala#3231646a708c43b7acc8e2aec4e7c8ddedfa7c57 › org.apache.tamaya:tamaya-core@0.4-incubating › org.apache.tamaya:tamaya-spisupport@0.4-incubating › junit:junit@4.12

Overview

junit:junit is an unit testing framework for Java

Affected versions of this package are vulnerable to Information Exposure. The JUnit4 test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default, readable by other users on that same system.

Note: This vulnerability does not allow other users to overwrite the contents of these directories or files. This only affects Unix like systems.

Remediation

Upgrade junit:junit to version 4.13.1 or higher.

References

Information Exposure vulnerability report