CVE-2024-45626
Apache James: denial of service through JMAP HTML to text conversion
Résumé
Apache James: denial of service through JMAP HTML to text conversion
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption that can result in a denial of service.
Users are recommended to upgrade to version 3.7.6 and 3.8.2, which fix this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com