{"action":"Upgrade org.apache.james:james-server to 3.7.5 (3.7.x) or 3.8.1 (3.8.x) or later.","affected":[{"fixed":"3.7.5","introduced":"0"},{"fixed":"3.8.1","introduced":"3.8.0"}],"component":"org.apache.james:james-server","cve_ids":["CVE-2023-51747"],"ecosystem":"Maven","epss":0.01045,"exploited":false,"fixed_versions":["3.7.5","3.8.1"],"ghsa_id":"GHSA-p5q9-86w4-2xr5","id":"tcs_01M5N96JGP526DRKT7W03YW1MP","modified_at":"2024-11-13T23:32:43.264836Z","published_at":"2024-02-27T15:30:31Z","references":["https://osv.dev/vulnerability/GHSA-p5q9-86w4-2xr5","https://nvd.nist.gov/vuln/detail/CVE-2023-51747","https://github.com/apache/james-project/commit/d1ef102540e504c067b6c1721a6f1e7eee9c6fc6","https://github.com/apache/james-project/commit/d5cd8bb098aa78d8d62c9645f3c532689ef1cb03","https://github.com/apache/james-project","https://lists.apache.org/thread/rxkwbkh9vgbl9rzx1fkllyk3krhgydko","https://postfix.org/smtp-smuggling.html","https://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide","http://www.openwall.com/lists/oss-security/2024/02/27/4"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-p5q9-86w4-2xr5","url":"https://osv.dev/vulnerability/GHSA-p5q9-86w4-2xr5"}],"summary":"SMTP smuggling in Apache James"}