-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.james.protocols:protocols-imap | maven | < 3.7.6 | 3.7.6 |
| org.apache.james.protocols:protocols-imap | maven | >= 3.8.0, < 3.8.2 | 3.8.2 |
Miggo AIRoot Cause AnalysisThe vulnerability stemmed from improper input validation and resource control in IMAP literal handling. The unpatched functions allowed: 1) No cumulative size checks for literals (enabling memory exhaustion), 2) No line length limits (facilitating buffer overconsumption), and 3) Uniform size limits regardless of authentication state (letting unauthenticated users trigger large allocations). The patch added validations for these exact scenarios, confirming these functions' role in the vulnerability.
JavaJavaOngoing coverage of React2Shell