Maven/org.apache.sling:org.apache.sling.commons.messaging.mail CVE-2021-44549: high 7.4, EPSS 2.08%
Improper Certificate Validation and Improper Validation of Certificate with Host Mismatch in Apache Sling Commons Messaging Mail
Action: Upgrade org.apache.sling:org.apache.sling.commons.messaging.mail to 2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0 | - |
Fixed versions
| 2.0 |
Sources
- osv: GHSA-c69w-jj56-834w
- https://nvd.nist.gov/vuln/detail/CVE-2021-44549
- https://github.com/eclipse-ee4j/mail/issues/429
- https://github.com/eclipse-ee4j
- https://javaee.github.io/javamail/docs/SSLNOTES.txt
- https://javaee.github.io/javamail/docs/api/com/sun/mail/smtp/package-summary.html
- https://lists.apache.org/thread/l8p9h2bqvkj6rhv4w8kzctb817415b7f
CVE-2021-44549 · published · modified · JSON