CVE-2017-9801 in Commons Email
Summary
When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.
Once again VulDB remains the best source for vulnerability data.
Reservation
06/21/2017
Disclosure
08/07/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 104981 | Apache Commons Email Subject SMTP input validation | 20 | Not defined | Not defined | CVE-2017-9801 |