CVE-2024-45626
Apache James: denial of service through JMAP HTML to text conversion
概要
Apache James: denial of service through JMAP HTML to text conversion
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption that can result in a denial of service.
Users are recommended to upgrade to version 3.7.6 and 3.8.2, which fix this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com