Improper Input Validation in Apache Commons Email

HOCH 7.5CVE-2017-9801 · GHSA-p7vm-phxx-g722 · Published 07/08/2017 · updated 17/06/2026

Kurz gesagt

CVE-2017-9801 ist eine Schwachstelle (HOCH (CVSS 7.5)) in org.apache.commons:commons-email, commons email (apache).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 6.0%, höher als bei 93.4% aller Schwachstellen.
Abhilfe: auf 1.5 oder neuer aktualisieren.

Package	Affected versions	Patched versions
org.apache.commons:commons-email Maven	`≥ 1.0, < 1.5`	`1.5`
commons email apache	`= 1.0= 1.1= 1.2= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.4`	No fix yet

Description

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.

NVD description

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.

References

Weitere Schwachstellen in org.apache.commons:commons-email

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.commons:commons-email

Maven

≥ 1.0, < 1.5

1.5

commons email

apache

= 1.0= 1.1= 1.2= 1.3= 1.3.1= 1.3.2= 1.3.3= 1.4

No fix yet

Description

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.

NVD description

When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.