CVE-2024-45626
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Feb 6, 2025
Updated: Feb 11, 2025
CWE ID 400
Summary
CVE-2024-45626 is a vulnerability affecting Apache James server's JMAP feature in versions below 3.8.2 and 3.7.6. The issue involves unbounded memory consumption during the HTML to text plain conversion process, leading to a denial of service. Users are advised to upgrade to the patched versions, 3.7.6 and 3.8.2, to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Apache James Server
Affected Vendors
- Apache Corporation