CVE-2023-51747
1 advisory.
Maven/org.apache.james:james-server CVE-2023-51747: high 7.1
SMTP smuggling in Apache James
Action: Upgrade org.apache.james:james-server to 3.7.5 (3.7.x) or 3.8.1 (3.8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.7.5 | - |
| 3.8.0 | 3.8.1 | - |
Fixed versions
| 3.7.5 | 3.8.1 |
Sources
- osv: GHSA-p5q9-86w4-2xr5
- https://nvd.nist.gov/vuln/detail/CVE-2023-51747
- https://github.com/apache/james-project/commit/d1ef102540e504c067b6c1721a6f1e7eee9c6fc6
- https://github.com/apache/james-project/commit/d5cd8bb098aa78d8d62c9645f3c532689ef1cb03
- https://github.com/apache/james-project
- https://lists.apache.org/thread/rxkwbkh9vgbl9rzx1fkllyk3krhgydko
- https://postfix.org/smtp-smuggling.html
- https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide
- http://www.openwall.com/lists/oss-security/2024/02/27/4
CVE-2023-51747 · published · modified · JSON