CVE-2018-1294 | BDVDB-2026-98097 Detail

Description#

If a user of Apache Commons Email (typically an application programmer) passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details (recipients, contents, etc.) might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You can mitigate this vulnerability for older versions of Commons Email by stripping line-breaks from data, that will be passed to Email.setBounceAddress(String).

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-03-20Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.