CVE-2024-45626

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Feb 6, 2025
Updated: Feb 11, 2025
CWE ID 400

Summary

CVE-2024-45626 is a vulnerability affecting Apache James server's JMAP feature in versions below 3.8.2 and 3.7.6. The issue involves unbounded memory consumption during the HTML to text plain conversion process, leading to a denial of service. Users are advised to upgrade to the patched versions, 3.7.6 and 3.8.2, to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apache James Server

Affected Vendors

  • Apache Corporation